Senior SAP Basis and Security Administration Engineer
Cubic · Hyderabad
Business Unit:
Cubic CorporationCompany Details:
We are seeking a highly experienced Senior SAP Basis Administration Engineer to support the administration, security execution, and integration maintenance for our SAP ECC 6.0 on HANA landscape under the direction of the SAP Basis & Security Manager. Our SAP infrastructure is hosted and managed by a third-party hosting/managed-services hosting partner, so this role is heavily focused on technical oversight, working with hosting partner governance, and ensuring the hosting partner executes Basis operations to our standards. This is an equally weighted Basis and Security role: the ideal candidate has deep SAP ECC/HANA Basis expertise and hands-on ownership of SAP security administration, plus proven experience configuring integrations using PI/PO, SFTP, cloud-based integration agents and supporting enterprise archiving workflow.Job Details:
Key Responsibilities
SAP Basis Administration (Hosting Partner Environment)
- Execute and coordinate day-to-day technical operational interactions with the third-party hosting partner for all SAP ECC 6.0 on HANA Basis activities — driving accountability.
- Support patch, kernel upgrade, and support pack revision update, and system enhancement initiatives following established governance and architecture.
- Work with SAP functional and technical teams to support systems refreshes, client copies, transport management, and landscape maintenance.
- Relentlessly monitor SAP ECC/HANA system performance, verify hosting partner SLAs (performance, availability, response times), and escalate issues to internal leadership when standards slip.
- Perform systems performance analysis and capacity trending. Analyze usage patterns, system headroom, and assist in executing database archiving strategies and capacity plans per lead direction.
- Support disaster recovery planning, testing (backup/restore, HANA system replication/HSR, failover), and validation activities to ensure business continuity readiness.
- Maintain rigorous operational documentation, execution logs, and internal oversight records.
SAP Security Administration
- Maintain and support the SAP authorization concept — roles, composite roles, profiles, and organizational-level restrictions — across the ECC 6.0/HANA landscape in accordance with established security policies.
- Execute user access lifecycle management, including provisioning, de-provisioning, access recertification, and enforcement of least-privilege principles across all clients and environments (Dev/QA/Prod).
- Drive Perform segregation of duties (SoD) analysis and remediation, proactively identifying and resolving conflicting access before it becomes an audit finding, and maintaining a clean SoD ruleset aligned to business risk.
- Support Internal Audit, InfoSec, and external auditors on all SAP security assessments.
- Proactively monitor for anomalous access patterns, dormant accounts, and emerging authorization risk, bringing forward remediation plans before issues are flagged externally.
- Define, document, and enforce SAP security standards, naming conventions, and role-build methodology, ensuring consistency and auditability across the entire authorization landscape.
Integration Configuration
- Configure and support of interfaces built on SAP PI/PO (IDoc, RFC, SOAP, REST, File adapters), driving configuration, proactive monitoring, and rapid troubleshooting across every SAP-to-third-party connection.
- Support and maintain SFTP-based data exchange processes, including connection monitoring, key/credential management, SSL/TLS certificate updates, and coordinating network/firewall changes with the hosting partner.
- Practical experience on SAP SAML configuration.
- Configure, maintain, and support cloud-based integration agents/connectors (e.g., SAP Cloud Connector or equivalent middleware agents), ensuring a secure, reliable bridge between the hosting partner's ECC environment and cloud/third-party applications.
- Guarantee that integration channels remain secure, thoroughly documented, and resilient against disruption from hosting partner-side changes (e.g., patching, network reconfiguration) — anticipating issues before they impact the business.
- Support enterprise background processing and automated workflows (e.g., SAP Redwood job schedulers).
Required Qualifications
Basis and Security
- 5-7 years of hands-on SAP Basis and security administration experience, including at least 2–3 years in a senior or lead capacity.
- Strong, specific experience with SAP ECC 6.0 on HANA — architecture, transport management, and system landscape design.
- Working knowledge of HANA database administration concepts and SLT.
- Proven ownership of SAP authorization concepts across a large, complex landscape, including experience leading audit responses and access recertification cycles.
- Experience working with SLA management and change governance.
- Experience in executing archiving large tables and overall systems performance tuning.
- Practical experience setting up and maintaining SFTP connections for secure file-based integrations.
- Experience configuring and managing cloud-based integration agents (e.g., SAP Cloud Connector or similar).
- Excellent troubleshooting, analytical, and documentation skills, with the ability to assess hosting-partner-delivered work critically.
Preferred Qualifications
- Knowledge of SAP best-practice data archiving strategies (e.g., SARA/archive object configuration, retention policies, and database growth management) to support long-term system performance and storage optimization.
- Experience with enterprise job scheduling systems (e.g., SAP Redwood CPS/BPA).
- Exposure to OpenText solutions (Vendor Invoice Management / VIM, Content Server, or Archive Center).
- Experience with tax system interface maintenance (e.g., Vertex updates/patching).
- Familiarity supporting connections to enterprise cloud integration and analytics tools (e.g., Workato, Palantir connectors, Tableau, Alteryx, BOBJ).
- SAP certification(s) in Basis, Security, or Integration technologies.
- Experience with SAP GRC Access Control (Access Risk Analysis, Emergency Access Management, Access Request Management) and automated access review tools.
- Experience and knowledge in PI/PO a plus,
Worker Type:
Employee
We are committed to creating an inclusive workplace and welcome applications from people of all backgrounds. We do not discriminate based on any protected characteristic under applicable law.