SAP Basis DB & Security Architect
- KK Technologies LLC
5 Hours Ago
NA
C2C
Remote
8-10 Years
Required Skills: AWS, Azure, GCP, SAP cloud, PFCG, SU24, SoD, audit, SAP BASIS, SAP Security, SAP ABAP
Job Description
Key Responsibilities
🔹 Architecture & Strategy
- Define end‑to‑end technical and security architecture for SAP S/4HANA systems transitioning to RISE.
- Design target landscapes (Sandbox, DEV, QA, PRD, DR) aligned with SAP RISE standards and compliance requirements.
- Establish governance for system build standards, refresh strategy, transports, monitoring, and access controls.
- Provide architectural guidance for hybrid SAP environments (on‑prem + cloud).
🔹 S/4HANA to RISE Migration Leadership
- Lead technical and security planning for S/4HANA conversions and RISE landscape transformations.
- Perform readiness assessments, security risk evaluations, and technical feasibility analysis.
- Coordinate RISE system provisioning with SAP and integration partners.
- Oversee cutover, system validation, security remediation, and post‑migration stabilisation.
🔹 BASIS Administration & Platform Governance
- Provide technical oversight for kernel upgrades, support packs, patches, system copies, and refreshes.
- Govern transports, client strategy, and post‑SAP delivery configuration validation.
- Define and maintain runbooks, SOPs, and operational documentation.
- Analyse performance issues and coordinate resolution with SAP.
🔹 SAP Security & Access Governance
- Own end‑to‑end SAP security administration across S/4HANA, Fiori, SAP BTP, SRM, and Cloud ALM.
- Design and maintain role and authorisation concepts aligned with business, audit, and regulatory standards.
- Manage user provisioning, de‑provisioning, and role changes in coordination with IAM teams.
- Provide L3 AMS support for security incidents, authorisation issues, and access defects.
- Ensure compliance with SOX, audit, and regulatory requirements, including periodic access reviews.
🔹 Fiori, BTP & Cloud Security
- Configure and support Fiori security (catalogues, groups, spaces, roles).
- Oversee SAP BTP security, role collections, and integrations.
- Coordinate identity management, SSO, technical users, and certificates.
🔹 Monitoring, Availability & Compliance
- Define monitoring strategy, KPIs, and alerting for RISE environments.
- Validate SAP‑provided High Availability (HA) and Disaster Recovery (DR) solutions.
- Ensure audit readiness and security controls meet regulatory and compliance standards.
🔹 Stakeholder & Vendor Management
- Act as primary technical and security liaison between customer teams, SAP, and system integrators.
- Lead technical design and security architecture workshops.
- Support knowledge transition from incumbent vendors and mentor AMS team members.
Required Skills & Experience
- 8–10+ years of SAP experience, including:
- 8+ years in SAP BASIS
- 5+ years in SAP Security / GRC
- Hands-on experience with SAP S/4HANA and at least one large-scale migration.
- Strong understanding of RISE with SAP operating and shared‑responsibility model.
- Expertise in:
- System copies, transports, upgrades, and performance tuning
- SAP Security (PFCG, SU24, SoD, audit controls)
- Fiori security and role design
- Experience operating SAP on cloud platforms (AWS, Azure, or GCP)
- Strong troubleshooting and root‑cause analysis skills.
- Excellent communication skills for working with business, auditors, SAP, and IT stakeholders.
