SAP Basis, Security & IAG Consultant

GBM; Dubai; On-site; AED 404,000 - 551,000; Full time

Job summary

GBM in Dubai seeks an experienced SAP Basis, Security & IAG Consultant to own day-to-day administration, security and access governance of the SAP landscape, while leading SAP Cloud IAG implementation and driving license optimization. The role requires strong Basis administration, security design, and audit readiness across S/4HANA, Fiori and BTP.

The candidate should have hands-on SAP IAG experience, license measurement knowledge, and be able to operate in a fast-paced SLA-driven environment

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Engineering or equivalent field.
• Minimum 8 years’ hands‑on experience in SAP Basis, SAP Security and IAG implementation and support.
• Practical experience of SAP IAG - risk analysis, role design, access request workflows, SOD remediation and access certification.
• Working knowledge of SAP license measurement and FUE / user classification optimisation.
• Experience supporting internal and external audits and closing control observations.
• Familiar with ITIL‑based incident, problem and change management in an SLA‑driven support model.
• Exposure to SAP DMS / Content Server, data archiving, and SAP HANA administration.
• Strong English communication skills; able to work on‑site in Dubai and join immediately or at short notice.
• Flexible work pattern - available beyond normal office hours, and on weekends or public holidays when required, to support go‑lives, cutovers, upgrades, patching windows, month / year‑end closing, audits and critical incidents.
• SAP certification in Basis, Security or GRC / IAG is an added value.

Responsibilities

• Basis support & operations - manage Basis and Security support tickets within agreed SLA; administer S/4HANA / ECC, Fiori, BTP and Solution Manager across DEV/QAS/PRD, including patching, SAP Notes, client copies, system refresh, backup and recovery.
• Access rights management - work as support consultant for user provisioning and de‑provisioning; design and maintain PFCG roles (single, composite, derived) and Fiori authorizations on a least‑privilege basis; troubleshoot authorization issues.
• Transport & change management - manage transport / change movement requests across the landscape (STMS / CTS+ / ChaRM) with proper approval, sequencing, verification and change‑control evidence.
• IWA reporting - generate and review EarlyWatch Alert reports, priorities red and yellow alerts, take necessary action on priority and track findings to closure.
• IAG project implementation - deliver the SAP Cloud IAG implementation: application access and role clean‑up across SAP and non‑SAP systems, set‑up of IAG processes (access request and approval workflows, role/risk owners, provisioning rules), SOD ruleset configuration, automated SOD violation reminders, access certification campaigns and integration with IAS / IPS / BTP.
• License & FUE optimisation - monitor FUE and license consumption against entitlement, classify users correctly, reclaim dormant and duplicate accounts, and act in advance on any sign of over‑utilisation; run USMM / LAW and support annual system measurement.
• Periodic reviews - conduct scheduled user access reviews and transport request reviews with business and application owners, and track remediation to closure.
• Audit clearance - be accountable for audit readiness and clearance of all activities under this role; provide evidence for access, privileged access and change controls, and close observations within agreed timelines.
• DMS / Content Server - implement and administer SAP DMS and Content Server to store attachments outside the database, configure repositories and ArchiveLink, and run the data archiving strategy (SARA) to control database growth.
• Monitoring & upgrades - monitor application performance and availability, manage planned and unplanned downtime, track SAP upgrade, maintenance and security notifications, and take timely action.
• Documentation & stakeholders - maintain SOPs and role documentation; coordinate with functional teams, infrastructure, internal audit and SAP / partner vendors, and report status and risks to IT management.

Skills

SAP Basis administration

SAP Security

ITIL processes

On-site Dubai readiness

English communication

Education

Bachelor’s degree in Computer Science or equivalent

Tools

SAP HANA

Fiori Front-End Server

SAP Solution Manager

USMM / LAW

ChaRM

STMS

S/4HANA

DMS

Content Server

ArchiveLink

BTP

IAS / IPS integration

Job description

Job Title: SAP Basis, Security & IAG Consultant

Job Area: Application Management

Location: GBM Dubai HQ

Employment Type: Full-Time

Target Start Date: ASAP

Job Summary:

We are seeking an experienced and hands‑on SAP Basis, Security & IAG Consultant to own the day‑to‑day administration, security and access governance of GBM’s SAP landscape - keeping systems available, secure, compliant and audit‑clean - while leading the SAP Identity Access Governance (IAG) implementation and driving license (FUE) optimization.

The ideal candidate will have a strong background in SAP Basis administration and SAP Security role design, combined with practical experience of SAP Cloud IAG, SAP license measurement and audit support.

This is a hands‑on role combining SLA‑driven support with project delivery, and requires both technical depth and control and compliance understanding to keep the S/4HANA, Fiori and BTP landscape stable, governed and audit‑ready. The role reports to the IT Technical Head.

Job Responsibilities:

• Basis support & operations - manage Basis and Security support tickets within agreed SLA; administer S/4HANA / ECC, Fiori, BTP and Solution Manager across DEV/QAS/PRD, including patching, SAP Notes, client copies, system refresh, backup and recovery.
• Access rights management - work as support consultant for user provisioning and de‑provisioning; design and maintain PFCG roles (single, composite, derived) and Fiori authorizations on a least‑privilege basis; troubleshoot authorization issues.
• Transport & change management - manage transport / change movement requests across the landscape (STMS / CTS+ / ChaRM) with proper approval, sequencing, verification and change‑control evidence.
• EWA reporting - generate and review EarlyWatch Alert reports, priorities red and yellow alerts, take necessary action on priority and track findings to closure.
• IAG project implementation - deliver the SAP Cloud IAG implementation: application access and role clean‑up across SAP and non‑SAP systems, set‑up of IAG processes (access request and approval workflows, role/risk owners, provisioning rules), SOD ruleset configuration, automated SOD violation reminders, access certification campaigns and integration with IAS / IPS / BTP.
• License & FUE optimisation - monitor FUE and license consumption against entitlement, classify users correctly, reclaim dormant and duplicate accounts, and act in advance on any sign of over‑utilisation; run USMM / LAW and support annual system measurement.
• Periodic reviews - conduct scheduled user access reviews and transport request reviews with business and application owners, and track remediation to closure.
• Audit clearance - be accountable for audit readiness and clearance of all activities under this role; provide evidence for access, privileged access and change controls, and close observations within agreed timelines.
• DMS / Content Server - implement and administer SAP DMS and Content Server to store attachments outside the database, configure repositories and ArchiveLink, and run the data archiving strategy (SARA) to control database growth.
• Monitoring & upgrades - monitor application performance and availability, manage planned and unplanned downtime, track SAP upgrade, maintenance and security notifications, and take timely action.
• Documentation & stakeholders - maintain SOPs and role documentation; coordinate with functional teams, infrastructure, internal audit and SAP / partner vendors, and report status and risks to IT management.

Qualifications & Education Requirements:

• Graduate (Bachelor’s degree) in Computer Science, Information Technology, Engineering or equivalent field.
• Minimum 8 years’ hands‑on experience in SAP Basis, SAP Security and IAG implementation and support.
• Practical experience of SAP IAG - risk analysis, role design, access request workflows, SOD remediation and access certification.
• Working knowledge of SAP license measurement and FUE / user classification optimisation.
• Experience supporting internal and external audits and closing control observations.
• Familiar with ITIL‑based incident, problem and change management in an SLA‑driven support model.
• Exposure to SAP DMS / Content Server, data archiving, and SAP HANA administration.
• Strong English communication skills; able to work on‑site in Dubai and join immediately or at short notice.
• Flexible work pattern - available beyond normal office hours, and on weekends or public holidays when required, to support go‑lives, cutovers, upgrades, patching windows, month / year‑end closing, audits and critical incidents.
• SAP certification in Basis, Security or GRC / IAG is an added value.

Required Expertise:

• SAP Basis Administration (S/4HANA, ECC, SAP HANA, Fiori Front‑End Server and Gateway, SAP BTP, SAP Solution Manager)
• SAP Security & Authorisations (PFCG single / composite / derived roles, Fiori authorisations, SU01 / SU10 / SUIM, SU53 / STAUTHTRACE)
• SAP Cloud Identity Access Governance (IAG) implementation - access request and approval workflows, SOD rulesets, access certification
• SAP GRC Access Control, and SAP IAS / IPS integration
• Transport and change management (STMS / CTS+ / ChaRM)
• License measurement and FUE optimisation (USMM / LAW, Digital Access evaluation)
• System copy / refresh, patching, upgrades, backup and recovery
• SAP DMS, Content Server, ArchiveLink and data archiving (SARA)
• EarlyWatch Alert reporting, performance and availability monitoring
• Audit support and IT control evidence (access, privileged access, change management)
• ITIL‑based service management in an SLA‑driven support model