Note: The job is a remote job and is open to candidates in USA. Stage 4 Solutions is a company seeking a Senior SAP BASIS Security Engineer for a global aerospace client. In this role, you will manage user authorizations, security roles, and compliance with enterprise security standards while supporting various SAP systems.
Responsibilities
- Administer and secure SAP landscapes by managing user authorizations, security roles, SAP Basis activities, SAP GRC controls, Fiori security, transport management, and compliance with SOX and enterprise security standards while supporting SAP ECC, S/4HANA, and related SAP systems
- Design, build, and maintain composite and single roles
- Conduct role de duplication, role testing, and segregation of duties (SoD) analysis
- User provisioning, password policies, and SSO (Kerberos, SAML, OAuth)
- Build and maintain SAP security roles with a focus on Fiori authorizations, maintaining consistency across frontend and backend systems
- Activate, maintain, and manage security authorizations for backend Odata services required by Fiori applications
- Implementation of SoD controls and remediation
- Ability to produce audit ready documentation and reports
- Knowledge of GDPR, SOX, ISO 27001, and other regulatory requirements
- Ability to monitor and assess system logs for unusual activities and collaborate on system vulnerability remediation
- Monitoring and response to security alerts (e.g., failed logons, suspicious activity)
- Conducting root cause analysis and remediation for security breaches
- Coordination with IT security teams for patching and hardening
- Basic ABAP debugging and code review for security related enhancements
- Scripting (PowerShell, Bash, Python) for automation of user provisioning and reporting
- Experience with Agile or Waterfall delivery models
- Ability to manage multiple security projects, deadlines, and stakeholder expectations
- Clear documentation of security policies, procedures, and role designs
- Ability to liaise with functional, basis, and audit teams
- Training end users and administrators on security best practices
Skills
- Must be a U.S. Citizen
- 8+ years of experience as SAP BASIS Security Engineer / Administrator
- Bachelor s Degree
- In depth knowledge of SAP authorizations (roles, profiles, authorizations objects)
- Experience with SAP NetWeaver security architecture (ABAP, Java, SAP HANA)
- Understanding of SAP GRC (Access Control, Process Control)
- S/4 Hana & Fiori Security
- Experience with standard engineering process
- Background in doing requirements discovery and translation from business requirements to technical requirements / deliverables
- Experience with software systems design
- Administration of SAP ECC, S/4HANA, BW, CRM, MDG, GTS, Solution Manager/Focused Build, Ariba, SuccessFactors
- Management of SAP Basis components (client administration, transports, system copies)
- Familiarity with SAP Cloud Platform and SAP BTP security services
- Design, build, and maintain composite and single roles
- Conduct role de duplication, role testing, and segregation of duties (SoD) analysis
- User provisioning, password policies, and SSO (Kerberos, SAML, OAuth)
- Build and maintain SAP security roles with a focus on Fiori authorizations, maintaining consistency across frontend and backend systems
- Activate, maintain, and manage security authorizations for backend Odata services required by Fiori applications
- Familiarity with Identity Access Management tools
- Implementation of SoD controls and remediation
- Ability to produce audit ready documentation and reports
- Knowledge of GDPR, SOX, ISO 27001, and other regulatory requirements
- Ability to monitor and assess system logs for unusual activities and collaborate on system vulnerability remediation
- SAP Authorization Management (SU01, PFCG, SU24, SU53, ST01)
- SAP GRC Access Risk Analysis (ARA), Business Role Management (BRM), Emergency Access Management (EAM)
- Use of transport tools (CTS, STMS) and change management workflows
- Fiori Security Administration (Catalogs, Groups, Spaces, Pages, and Odata services
- Troubleshooting tools (ST01/STAUTHTRACE, SU53, SLG1, ST22, /IWFND/ERROR_LOG)
- ServiceNow or any other incident management tool
- Monitoring and response to security alerts (e.g., failed logons, suspicious activity)
- Conducting root cause analysis and remediation for security breaches
- Coordination with IT security teams for patching and hardening
- Basic ABAP debugging and code review for security related enhancements
- Scripting (PowerShell, Bash, Python) for automation of user provisioning and reporting
- Experience with Agile or Waterfall delivery models
- Ability to manage multiple security projects, deadlines, and stakeholder expectations
- Clear documentation of security policies, procedures, and role designs
- Ability to liaise with functional, basis, and audit teams
- Training end users and administrators on security best practices
- Strong analytical and problem solving abilities
- Attention to detail and high level of accuracy
- Proactive mindset and continuous learning orientation
- Collaborative mindset and approach to work
Benefits
- This is a W-2 role as a Stage 4 Solutions employee.
- Health benefits and 401K are offered.
Company Overview