Senior SAP Basis and Security Administration Engineer

Overview

Senior SAP Basis and Security Administration Engineer supporting administration, security execution and integration maintenance for the SAP ECC 6.0 on HANA landscape, under the direction of the SAP Basis & Security Manager. The SAP infrastructure is hosted and managed by a third-party hosting partner, so the role focuses on technical oversight of the hosting partner and ensuring Basis operations meet company standards.

What you'll do

• Execute and coordinate day-to-day technical operational interactions with the third-party hosting partner for all SAP ECC 6.0 on HANA Basis activities, driving accountability.
• Support patch, kernel upgrade, support pack revision and system enhancement initiatives following established governance and architecture.
• Work with SAP functional and technical teams to support systems refreshes, client copies, transport management and landscape maintenance.
• Monitor SAP ECC/HANA system performance, verify hosting partner SLAs (performance, availability, response times) and escalate issues to internal leadership when standards slip.
• Perform systems performance analysis and capacity trending; analyze usage patterns and system headroom, and assist in executing database archiving strategies and capacity plans per lead direction.
• Support disaster recovery planning and testing (backup/restore, HANA system replication/HSR, failover) and validation activities to ensure business continuity readiness.
• Maintain operational documentation, execution logs and internal oversight records.
• Maintain and support the SAP authorization concept (roles, composite roles, profiles and organizational-level restrictions) across the ECC 6.0/HANA landscape in accordance with established security policies.
• Execute user access lifecycle management, including provisioning, de-provisioning, access recertification and enforcement of least-privilege principles across all clients and environments (Dev/QA/Prod).
• Perform segregation of duties (SoD) analysis and remediation, identifying and resolving conflicting access and maintaining a clean SoD ruleset aligned to business risk.
• Support Internal Audit, InfoSec and external auditors on all SAP security assessments.
• Monitor for anomalous access patterns, dormant accounts and emerging authorization risk, bringing forward remediation plans before issues are flagged externally.
• Define, document and enforce SAP security standards, naming conventions and role-build methodology, ensuring consistency and auditability across the authorization landscape.
• Configure and support interfaces built on SAP PI/PO (IDoc, RFC, SOAP, REST, File adapters), including proactive monitoring and rapid troubleshooting of every SAP-to-third-party connection.
• Support and maintain SFTP-based data exchange processes, including connection monitoring, key/credential management, SSL/TLS certificate updates, and coordinating network/firewall changes with the hosting partner.
• Support SAP SAML configuration.
• Configure, maintain and support cloud-based integration agents/connectors (e.g., SAP Cloud Connector or equivalent middleware agents), ensuring a secure, reliable bridge between the hosting partner's ECC environment and cloud/third-party applications.
• Ensure integration channels remain secure, documented and resilient against disruption from hosting partner-side changes (e.g., patching, network reconfiguration).
• Support enterprise background processing and automated workflows (e.g., SAP Redwood job schedulers).

What you'll need

• 5-7 years of hands-on SAP Basis and security administration experience.
• At least 2-3 years in a senior or lead capacity.
• Strong, specific experience with SAP ECC 6.0 on HANA, including architecture, transport management and system landscape design.
• Working knowledge of HANA database administration concepts and SLT.
• Proven ownership of SAP authorization concepts across a large, complex landscape, including experience leading audit responses and access recertification cycles.
• Experience working with SLA management and change governance.
• Experience in executing archiving of large tables and overall systems performance tuning.
• Practical experience setting up and maintaining SFTP connections for secure file-based integrations.
• Experience configuring and managing cloud-based integration agents (e.g., SAP Cloud Connector or similar).
• Excellent troubleshooting, analytical and documentation skills, with the ability to assess hosting-partner-delivered work critically.

Nice to have

• Knowledge of SAP best-practice data archiving strategies (e.g., SARA/archive object configuration, retention policies and database growth management).
• Experience with enterprise job scheduling systems (e.g., SAP Redwood CPS/BPA).
• Exposure to OpenText solutions (Vendor Invoice Management / VIM, Content Server or Archive Center).
• Experience with tax system interface maintenance (e.g., Vertex updates/patching).
• Familiarity supporting connections to enterprise cloud integration and analytics tools (e.g., Workato, Palantir connectors, Tableau, Alteryx, BOBJ).
• SAP certification(s) in Basis, Security or Integration technologies.
• Experience with SAP GRC Access Control (Access Risk Analysis, Emergency Access Management, Access Request Management) and automated access review tools.
• Experience and knowledge in PI/PO.

Details

• Location: Hyderabad, Telangana.
• Worker type: Employee.