Company Description
Prae… investments through new implementations, upgrades, and optimization of existing systems. Founded by senior SAP professionals with decades of experience, the firm combines deep technical expertise with a focus on strategic business outcomes across industries such as manufacturing, consumer products, CPG-Food, and wholesale distribution. Praemin e o operates with a flexible, scalable model, supporting both on-site and remote engagements to meet diverse client needs. The company achieved early profitability through project-based consulting, system upgrades, and executive advisory services, demonstrating strong demand for high-caliber, outcome-driven SAP consulting. Its core mission is to help clients optimize and expand their use of SAP to realize the full value of their software investments.
SAP Basis & Security Consultant
4 - 10 Yrs exp.
ROLE SUMMARY
We are looking for an experiencedSAP S/4HANA Basis & Security Consultantto install, administer, secure and support SAP S/4HANA landscapes (On-Premise, Private and Public Cloud). The consultant should have strong hands-on experience in SAP Basis administration, SAP HANA database, upgrades and S/4HANA conversions, together with SAP security, role design and authorisation management. The consultant will work closely with functional and technical teams, infrastructure partners and business stakeholders to keep SAP systems stable, secure, compliant andhigh performing.
KEY RESPONSIBILITIES
- Install, configure and administer SAP S/4HANA, SAP HANA, Fiori front-end and related NetWeaver systems across DEV, QA and PRD landscapes.
- Plan and execute upgrades, support pack and kernel updates, system copies / refreshes and S/4HANA conversions.
- Monitor system health and performance, perform tuning and troubleshooting, and resolve incidents within agreed SLAs.
- Manage the transport landscape and change management, ensuring controlled movement of changes to production.
- Design, build and maintain SAP roles and authorisations, including Fiori business roles, in line with Segregation of Duties (SoD) principles.
- Administer users and access, troubleshoot authorisation issues, and support internal and external security audits.
- Implement security hardening – SSO, SSL/SNC, certificates, security notes and audit logging.
- Support cutover, go-live andhypercare, and prepare technical runbooks, procedures and documentation.
SKILLS REQUIRED
1. SAP Basis Administration
- System administration– installation, client administration, background jobs, RFC destinations, spool and printer management, and system copies / refreshes.
- Monitoring and performance– work processes, dumps, system logs, OS / DB monitoring and performance tuning (SM50, ST22, SM21, ST06, ST03N).
- Maintenance– support packages, kernel upgrades, SPAM / SAINT and SAP Note implementation (SNOTE).
2. SAP HANA Database
- HANA administration– installation, backup and recovery, HANA System Replication (HSR), memory management and patching.
- Monitoring and troubleshooting usingSAP HANA Cockpitand HANA Studio.
- Software Update Manager (SUM), including Database Migration Option (DMO), andMaintenance Planner.
- S/4HANA conversion activities – Readiness Check, simplification item checks and technical downtime planning.
4. Transport & Change Management
- STMS / CTSconfiguration and transport management, and change management usingSAP Solution Manager (ChaRM)orSAP Cloud ALM.
- SAP Fiori LaunchpadandSAP Gatewaysetup (embedded or hub deployment), includingcatalogs, spaces and pages, and OData service activation.
6. SAP Security & Authorisations
- Role design– single, composite and derived roles using PFCG, Fiori businesscatalogsand roles, and SU24 authorisation defaults.
- User administration– SU01 / SU10, central user administration (CUA), and authorisation troubleshooting (SU53, STAUTHTRACE).
- Segregation of Duties (SoD)– understandingOfSoDrisks, critical access and audit requirements.
7. Security Hardening & Compliance
- Single Sign-On(SAML 2.0, Kerberos /SPNego),SSL / TLSandSNC, and certificate management (STRUST).
- Security Audit Log(RSAU_CONFIG), security parameters, security notes andEarlyWatchAlert follow-up.
8. Cloud & RISE with SAP
- Understanding ofRISE with SAPand the shared responsibility model, SAP S/4HANA Cloud Private and Public Edition operations, andhyperscalerplatforms (AWS, Azure, GCP).
GOOD TO HAVE
- Knowledge ofSAP GRC Access Control or SAP Cloud Identity Access Governance (IAG), andSAP Cloud Identity Services (IAS / IPS).
- Knowledge of SAP BAIP (Business AI Platform, formerly BTP) administration, Cloud Connector and Joule for Consultants.
- Working knowledge of Linux / Windows administration and shell scripting.
- SAP certification in SAP S/4HANA System Administration or SAP HANA is preferred.
WHAT WE LOOK FOR
- Ownership. You take responsibility for system stability, security and outcomes, not just assigned tickets. When something is unclear or blocked, you work to resolve it rather than simply escalating it.
- Consulting mindset. You understand the business impact behind technical and access decisions, and are comfortable recommending a better architecture, process or control when you see one.
- Technical curiosity. You keep up with the evolution of SAP technology-S/4HANA, SAP HANA, RISE with SAP, Cloud ALM, cloud identity and access governance, BTP and automation and actively apply what is useful.
- Bias for action. You identify risks early, troubleshoot systematically under pressure and bring possible solutions rather than waiting for detailed instructions.
- Quality without handholding. You care about availability, performance, security, compliance and documentation, and can deliver reliable, audit-ready work independently.
- Team multiplier. You share knowledge, review others' work, mentor less-experienced colleagues and willingly step outside your immediate task when it helps the team or customer succeed.
- Clear communication. You can work directly with customers, infrastructure partners and distributed teams, explain technical and security decisions simply, and raise concerns early.