Senior SAP Basis And Authorization Technical Analyst

Core responsibilities

SAP BASIS: Provide end-to-end SAP Basis administration, technical operations, platform management, database administration, cloud integration, disaster recovery support, technical monitoring, lifecycle management, performance optimization, and technical project support across all production and non-production SAP landscapes. The resource will ensure high availability, security, stability, and optimal performance of SAP systems while supporting implementation projects, upgrades, and operational activities.

SAP Authorization: Provide end-to-end SAP security and authorization administration across the enterprise SAP landscape, ensuring secure access management, compliance, governance, audit readiness, and adherence to SAP security best practices. Supports approximately 700 users.

Key responsibilities

1. SAP Basis Administration
   Administration of SAP S/4HANA, HANA, Solution Manager, Fiori, BTP, Cloud Connector, Web Dispatcher, DMS, BusinessObjects, SAP Router, and related platforms.
   System installations, upgrades, migrations, patches, kernel updates, support package implementation, transport management, client administration, system refresh, and technical troubleshooting.
   Coordination of SAP technical support activities with functional teams and external vendors.
2. Monitoring & Operations
   Continuous 24x7 SAP application monitoring with tool-based alerting and consultant review for proactive corrective actions covering SAP applications, databases, operating systems, interfaces, background jobs, performance metrics, backups, clusters, and security logs.
   Proactive alerting, incident management, root cause analysis, and operational reporting (daily, weekly, monthly, and quarterly).
3. Database Administration
   Administration of SAP HANA, Sybase ASE, and MaxDB databases.
   Backup and recovery, performance tuning, upgrades, capacity planning, replication, storage management, and database optimization.
4. High Availability & Disaster Recovery
   Administration of HANA System Replication and ASCS clusters.
   Disaster recovery planning, testing, annual DR drills, synchronization validation, and reporting.
5. Security & Authorization Management
   User lifecycle management, role design and maintenance, authorization analysis, Fiori security, HANA security, and GRC/Firefighter administration.
   Audit support, compliance reviews, access reviews, license management, and security optimization initiatives.
   Support approximately 700 users.

Required technical skills

• SAP Basis Administration
• SAP HANA Administration
• SAP BTP & Cloud Connector
• SAP Solution Manager
• SAP BusinessObjects
• SAP DMS
• SAP Web Dispatcher
• SAP Router
• HANA, ASE, MaxDB Databases
• Linux and Windows Administration
• High Availability & Disaster Recovery
• Performance Tuning
• EarlyWatch Alert Reporting and Follow-up Action Implementation
• Backup & Recovery using Veeam
• S/4HANA Security
• HANA Security
• Fiori Security
• BTP & Cloud Connector Security
• BusinessObjects Security
• Solution Manager Security
• Audit & Compliance
• Security Best Practices

Educational qualifications

Bachelor's degree in Information Technology or equivalent.
SAP Basis, Security, Fiori or other relevant certification preferred.
6-8 years of SAP Basis administration experience.
5-7 years of SAP Security and Authorization experience.
Experience in multiple full-cycle SAP implementations, upgrades, migrations, and support engagements.

Technical competencies

• SAP Technology (Basis) Administration with HANA, Sybase & MaxDB databases for SAP applications – Expert
• Database Management - Expert
• MS Azure - Advanced
• Server, Storage computer technology in different Operating Systems - Advanced
• SAP Roles and Authorizations - Expert

Detailed responsibilities

1. SAP Landscape Administration - Responsible for complete administration of all SAP production and non-production systems including:
   SAP S/4HANA
   SAP HANA Database
   SAP ASCS/HANA High Availability Clusters
   SAP DMS
   SAP MaxDB
   SAP Web Dispatcher
   SAP BTP
   SAP Cloud Connector
   SAP Fiori
   SAP Solution Manager
   SAP ASE
   SAP BusinessObjects
   SAP Data Provisioning Agent
   SAP Router
2. SAP Technical Monitoring (24x7) - Perform proactive monitoring and administration of SAP landscapes including:
   SAP system health monitoring
   System log monitoring
   Audit log monitoring
   RFC monitoring
   Background job monitoring
   Update failures
   Work process monitoring
   Lock monitoring
   ABAP dump analysis
   SQL trace analysis
   Runtime analysis
   Response time monitoring
   CPU and memory utilization
   Operating system monitoring
   Database monitoring
   Print management monitoring
   Certificate expiry monitoring
   Interface monitoring
   SAP HANA monitoring
   Cluster monitoring
   Backup monitoring
   Fiori availability monitoring
   Business transaction monitoring
   Develop automated monitoring and alerting mechanisms with proactive notification to technical support teams.
   Prepare daily, weekly, and monthly operational reports.
3. SAP Basis Administration - Perform complete SAP Basis operational support including:
   System installation support
   Client administration
   Transport Management System administration
   Transport migration
   Change management
   Kernel upgrades
   Support package implementation
   Feature pack upgrades
   SAP Security Note implementation
   Certificate lifecycle management
   SAP Support Portal administration
   OSS incident management
   SAP Router configuration
   Job scheduling
   System startup/shutdown
   User support to development and functional teams
4. Database Administration - Provide complete administration for:
   SAP HANA
   SYBASE ASE
   MaxDB
   Responsibilities include:
   Performance tuning
   Capacity planning
   Backup and recovery using Veeam
   Database upgrades
   Patch implementation
   Database reorganization
   Consistency checks
   Database monitoring
   Storage management
   High availability administration
   System replication
   Database encryption
   SQL optimization
   Table partitioning
   Database troubleshooting
5. High Availability & Disaster Recovery - Responsible for:
   HANA System Replication
   ASCS Cluster administration
   DR synchronization
   Annual disaster recovery drills
   DR planning, execution, and reporting
   High availability monitoring
6. System Refresh & Technical Project Support - Plan and execute:
   Homogeneous system copies
   Annual system refreshes
   Sandbox refresh
   Quality system refresh
7. SAP Platform Administration - Provide administration for:
   SAP Business Technology Platform (BTP)
   SAP Cloud Connector
   SAP Solution Manager
   SAP BusinessObjects
   SAP Data Provisioning Agent
   SAP DMS
   SAP Router
   SAP Web Dispatcher
   Activities include:
   Installation
   Configuration
   Patch management
   Version upgrades
   Destination management
   Certificate management
   Transport management
   Performance optimization
   Troubleshooting
8. Backup Administration using Veeam - Manage:
   Backup scheduling and verification
   Restore testing
   Backup policy compliance
   Data recovery
   Backup troubleshooting
   Backup retention
9. Performance Optimization - Perform:
   SAP EarlyWatch implementation
   Continuous quality checks
   Performance analysis
   Capacity planning
   System tuning
   Quarterly performance reporting
10. Cloud Infrastructure Optimization - Support SAP infrastructure optimization through:
    Cloud cost optimization
    Resource rightsizing
    Capacity forecasting
    Governance compliance
    VM image upgrades
    OS lifecycle management
    Vendor support compliance
    Prevention of extended support costs
11. Service Management - Support ITIL processes including:
    Incident management
    Change management
    Service request fulfilment
    Root cause analysis
    SLA compliance
    Documentation
    Technical reporting
12. Cross Functional Technical Coordination - Coordinate with:
    SAP functional teams
    SAP development teams
    Infrastructure teams
    Database teams
    Storage teams
    Backup teams
    Network teams
    Operating system administrators
    SAP support
    Third-party vendors
    Business stakeholders

Deliverables

• Daily monitoring reports
• Weekly operational reports
• Monthly technical reports
• Quarterly performance reports
• EarlyWatch reports
• Capacity reports
• Backup validation reports
• DR drill reports
• System refresh reports
• Upgrade reports
• Root cause analysis reports
• Technical documentation
• Technical SOP updates

Additional areas of expertise

• SAP Security Notes
• SAP Transport Management
• Backup & Recovery using Veeam
• SAP Performance Tuning
• SAP EarlyWatch
• Database Administration (HANA, ASE, MaxDB)
• Cloud Infrastructure (Azure/AWS/GCP as applicable)
• Certificate Management
• ITIL Service Management

SAP Authorization

Responsible for complete SAP Authorization administration of all SAP production and non-production systems including:

• User Administration
  User creation
  User modification
  User lock/unlock
  User deletion
  Password resets
  License assignment
  User lifecycle management
• Role Administration
  Role design
  Role creation
  Role modification
  Role optimization
  Composite roles
  Derived roles
  Role testing
  Role transport
• Authorization Management
  SU53 troubleshooting
  SU24 maintenance
  Authorization object maintenance
  Transaction authorization
  Table authorization analysis
  Missing authorization analysis
  Authorization testing
• SAP Fiori Security
  Fiori role administration
  Catalog assignment
  Group assignment
  Launchpad security
  App authorization
  BTP security integration
• SAP HANA Security
  User administration
  Role administration
  Schema authorization
  Technical user management
  Database security
• Firefighter Support
  Firefighter user administration
  Emergency access monitoring
  Firefighter authorization support
• Audit & Compliance
  Annual access reviews
  SAP security optimization report reviews and implementation
  Audit log generation
  License measurement, utilization & optimization reports
  Compliance reporting
  Security recommendations
  Implementation of approved security improvements
  Share role design, compliance, and Firefighter reports/documentation

Operational support

Provide daily operational support including:

• Authorization troubleshooting
• Security incident support
• Change management
• Project security support
• New implementation security
• Role redesign
• End-user support