SAP Basis, Security & IAG Consultant

Job Title: SAP Basis, Security & IAG Consultant

Job Area: Application Management

Location: GBM Dubai HQ

Language Skills: English

Employment Type: Full-Time

Target Start Date: ASAP

Job Summary:

We are seeking an experienced and hands-on SAP Basis, Security & IAG Consultant to own the day-to-day administration, security and access governance of GBM’s SAP landscape - keeping systems available, secure, compliant and audit-clean - while leading the SAP Identity Access Governance (IAG) implementation and driving license (FUE) optimization.

The ideal candidate will have a strong background in SAP Basis administration and SAP Security role design, combined with practical experience of SAP Cloud IAG, SAP license measurement and audit support.

This is a hands-on role combining SLA-driven support with project delivery, and requires both technical depth and control and compliance understanding to keep the S/4HANA, Fiori and BTP landscape stable, governed and audit-ready. The role reports to the IT Technical Head.

Job Responsibilities:

• Basis support & operations - manage Basis and Security support tickets within agreed SLA; administer S/4HANA / ECC, Fiori, BTP and Solution Manager across DEV/QAS/PRD, including patching, SAP Notes, client copies, system refresh, backup and recovery.
• Access rights management - work as support consultant for user provisioning and de-provisioning; design and maintain PFCG roles (single, composite, derived) and Fiori authorizations on a least-privilege basis; troubleshoot authorization issues.
• Transport & change management - manage transport / change movement requests across the landscape (STMS / CTS+ / ChaRM) with proper approval, sequencing, verification and change-control evidence.
• EWA reporting - generate and review EarlyWatch Alert reports, priorities red and yellow alerts, take necessary action on priority and track findings to closure.
• IAG project implementation - deliver the SAP Cloud IAG implementation: application access and role clean-up across SAP and non-SAP systems, set-up of IAG processes (access request and approval workflows, role/risk owners, provisioning rules), SOD ruleset configuration, automated SOD violation reminders, access certification campaigns and integration with IAS / IPS / BTP.
• License & FUE optimisation - monitor FUE and license consumption against entitlement, classify users correctly, reclaim dormant and duplicate accounts, and act in advance on any sign of over-utilisation; run USMM / LAW and support annual system measurement.
• Periodic reviews - conduct scheduled user access reviews and transport request reviews with business and application owners, and track remediation to closure.
• Audit clearance - be accountable for audit readiness and clearance of all activities under this role; provide evidence for access, privileged access and change controls, and close observations within agreed timelines.
• DMS / Content Server - implement and administer SAP DMS and Content Server to store attachments outside the database, configure repositories and ArchiveLink, and run the data archiving strategy (SARA) to control database growth.
• Monitoring & upgrades - monitor application performance and availability, manage planned and unplanned downtime, track SAP upgrade, maintenance and security notifications, and take timely action.
• Documentation & stakeholders - maintain SOPs and role documentation; coordinate with functional teams, infrastructure, internal audit and SAP / partner vendors, and report status and risks to IT management.

Qualifications & Education Requirements:

• Graduate (Bachelor’s degree) in Computer Science, Information Technology, Engineering or equivalent field.
• Minimum 8 years’ hands-on experience in SAP Basis, SAP Security and IAG implementation and support.
• Practical experience of SAP IAG - risk analysis, role design, access request workflows, SOD remediation and access certification.
• Working knowledge of SAP license measurement and FUE / user classification optimization.
• Experience supporting internal and external audits and closing control observations.
• Familiar with ITIL-based incident, problem and change management in an SLA-driven support model.
• Exposure to SAP DMS / Content Server, data archiving, and SAP HANA administration.
• Strong English communication skills; able to work on-site in Dubai and join immediately or at short notice.
• Flexible work pattern - available beyond normal office hours, and on weekends or public holidays when required, to support go-lives, cutovers, upgrades, patching windows, month / year-end closing, audits and critical incidents.
• SAP certification in Basis, Security or GRC / IAG is an added value.

Required Expertise:

• SAP Basis Administration (S/4HANA, ECC, SAP HANA, Fiori Front-End Server and Gateway, SAP BTP, SAP Solution Manager)
• SAP Security & Authorizations (PFCG single / composite / derived roles, Fiori authorizations, SU01 / SU10 / SUIM, SU53 / STAUTHTRACE)
• SAP Cloud Identity Access Governance (IAG) implementation - access request and approval workflows, SOD rulesets, access certification
• SAP GRC Access Control, and SAP IAS / IPS integration
• Transport and change management (STMS / CTS+ / ChaRM)
• License measurement and FUE optimization (USMM / LAW, Digital Access evaluation)
• System copy / refresh, patching, upgrades, backup and recovery
• SAP DMS, Content Server, ArchiveLink and data archiving (SARA)
• EarlyWatch Alert reporting, performance and availability monitoring
• Audit support and IT control evidence (access, privileged access, change management)
• ITIL-based service management in an SLA-driven support model