SAP Basis, Security

Job Title: SAP Basis, Security & IAG Consultant Job Area: Application Management

Location:
GBM Dubai HQ Language

Skills:
English Employment Type: Full-Time Target Start Date: ASAP Job Summary: We are seeking an experienced and hands-on SAP Basis, Security & IAG Consultant to own the day-to-day administration, security and access governance of GBM’s SAP landscape
- keeping systems available, secure, compliant and audit-clean
- while leading the SAP Identity Access Governance (IAG) implementation and driving license (FUE) optimization. The ideal candidate will have a strong background in SAP Basis administration and SAP Security role design, combined with practical experience of SAP Cloud IAG, SAP license measurement and audit support. This is a hands-on role combining SLA-driven support with project delivery, and requires both technical depth and control and compliance understanding to keep the S/4HANA, Fiori and BTP landscape stable, governed and audit-ready. The role reports to the IT Technical Head. Job

Responsibilities:

- Basis support & operations
- manage Basis and Security support tickets within agreed SLA; administer S/4HANA / ECC, Fiori, BTP and Solution Manager across DEV/QAS/PRD, including patching, SAP Notes, client copies, system refresh, backup and recovery.
- Access rights management
- work as support consultant for user provisioning and de-provisioning; design and maintain PFCG roles (single, composite, derived) and Fiori authorizations on a least-privilege basis; troubleshoot authorization issues.
- Transport & change management
- manage transport / change movement requests across the landscape (STMS / CTS+ / ChaRM) with proper approval, sequencing, verification and change-control evidence.
- EWA reporting
- generate and review EarlyWatch Alert reports, priorities red and yellow alerts, take necessary action on priority and track findings to closure.
- IAG project implementation
- deliver the SAP Cloud IAG implementation: application access and role clean-up across SAP and non-SAP systems, set-up of IAG processes (access request and approval workflows, role/risk owners, provisioning rules), SOD ruleset configuration, automated SOD violation reminders, access certification campaigns and integration with IAS / IPS / BTP.
- License & FUE optimisation
- monitor FUE and license consumption against entitlement, classify users correctly, reclaim dormant and duplicate accounts, and act in advance on any sign of over-utilisation; run USMM / LAW and support annual system measurement.
- Periodic reviews
- conduct scheduled user access reviews and transport request reviews with business and application owners, and track remediation to closure.
- Audit clearance
- be accountable for audit readiness and clearance of all activities under this role; provide evidence for access, privileged access and change controls, and close observations within agreed timelines.
- DMS / Content Server
- implement and administer SAP DMS and Content Server to store attachments outside the database, configure repositories and ArchiveLink, and run the data archiving strategy (SARA) to control database growth.
- Monitoring & upgrades
- monitor application performance and availability, manage planned and unplanned downtime, track SAP upgrade, maintenance and security notifications, and take timely action.
- Documentation & stakeholders
- maintain SOPs and role documentation; coordinate with functional teams, infrastructure, internal audit and SAP / partner vendors, and report status and risks to IT management. Qualifications & Education

Requirements:

- Graduate (Bachelor’s degree) in Computer Science, Information Technology, Engineering or equivalent field.
- Minimum 8 years’ hands-on experience in SAP Basis, SAP Security and IAG implementation and support.
- Practical experience of SAP IAG
- risk analysis, role design, access request workflows, SOD remediation and access certification.
- Working knowledge of SAP license measurement and FUE / user classification optimization.
- Experience supporting internal and external audits and closing control observations.
- Familiar with ITIL-based incident, problem and change management in an SLA-driven support model.
- Exposure to SAP DMS / Content Server, data archiving, and SAP HANA administration.
- Strong English communication skills; able to work on-site in Dubai and join immediately or at short notice.
- Flexible work pattern
- available beyond normal office hours, and on weekends or public holidays when required, to support go-lives, cutovers, upgrades, patching windows, month / year-end closing, audits and critical incidents.
- SAP certification in Basis, Security or GRC / IAG is an added value. Required Expertise:
- SAP Basis Administration (S/4HANA, ECC, SAP HANA, Fiori Front-End Server and Gateway, SAP BTP, SAP Solution Manager)
- SAP Security & Authorizations (PFCG single / composite / derived roles, Fiori authorizations, SU01 / SU10 / SUIM, SU53 / STAUTHTRACE)
- SAP Cloud Identity Access Governance (IAG) implementation
- access request and approval workflows, SOD rulesets, access certification
- SAP GRC Access Control, and SAP IAS / IPS integration
- Transport and change management (STMS / CTS+ / ChaRM)
- License measurement and FUE optimization (USMM / LAW, Digital Access evaluation)
- System copy / refresh, patching, upgrades, backup and recovery
- SAP DMS, Content Server, ArchiveLink and data archiving (SARA)
- EarlyWatch Alert reporting, performance and availability monitoring
- Audit support and IT control evidence (access, privileged access, change management)
- ITIL-based service management in an SLA-driven support model