SAP Security and Basis Administrator

Barton Malow; Southfield (MI); On-site; USD 120,000 - 180,000; Full time

Job summary

Barton Malow is seeking an SAP Security Expert / Basis Administrator to own the SAP landscape across development, QA, and production. You will secure, optimize, and maintain S/4HANA PCE and Employee Central Payroll, coordinating with hosting partners on infrastructure and security operations.

You will design access models, configure single sign-on, and ensure compliance with security policies while supporting audits and system upgrades.

Qualifications

• 5+ years SAP Security & Basis administration in S/4HANA/ECC environments.
• Strong knowledge of SAP security concepts: roles, authorizations, PFCG, and segregation of duties.
• Experience with SAP authentication and single sign-on technologies (SNC, Secure Login Service, SAML, SAP Cloud Identity Services).
• Familiarity with SAP HANA database administration and SQL.
• Familiarity with SAP BTP subaccount management and cloud integration concepts.
• Comfort working in hosted/partner-managed infrastructure models (RISE with SAP or similar).
• Strong troubleshooting skills and ability to trace issues to root cause.
• Clear communicator across technical and business teams.

Responsibilities

• Administer SAP Basis operations across S/4HANA PCE and Employee Central Payroll.
• Design and implement SAP security architecture including roles and authorizations.
• Configure and support single sign-on and secure authentication technologies.
• Manage transports, client administration, kernel and support package upgrades, and system refreshes.
• Monitor performance and lead root-cause analysis of Basis-level issues and failures.
• Collaborate with hosting/infrastructure partners on network and connectivity changes.
• Maintain compliance with security policy and support audits and access reviews.
• Document system architecture, security models, and procedures.

Skills

SAP Security

SAP Basis

S/4HANA/ECC

PFCG & SOD

SAP authentication

Single sign-on

HANA SQL

Cloud Integration (SAP BTP)

RISE with SAP

Troubleshooting

Communication

Tools

SNC

Secure Login Service

SAML

STRUST

CERTRULE

Job description

Select how often (in days) to receive an alert:

Barton Malow is a family-owned construction and engineering firm building innovative, trust-based solutions for clients across the country. Our Technology team supports that work behind the scenes, running the SAP landscape that keeps our projects, people, and finances connected. We're looking for an SAP Security Expert / Basis Administrator to help keep that landscape secure, stable, and ready for what's next.

About the Role

This role owns the health and security of Barton Malow's SAP environment end to end. You'll administer and secure systems across our S/4HANA PCE landscape (development, quality assurance, and production), and Employee Central Payroll, while working closely with our hosting partner on infrastructure operations. You'll be the go-to expert for SAP security architecture, authentication, and authorization — designing access models that protect the business without slowing it down.

What You'll Do

• Administer SAP Basis operations across S/4HANA PCE (development, quality assurance, and production), and Employee Central Payroll, coordinating closely with our hosting partner on infrastructure, system landscape changes, and Basis support
• Design, implement, and maintain SAP security architecture, including roles, authorizations, and segregation-of-duties controls across the SAP landscape
• Configure and support single sign-on and secure authentication using SAP Cloud Identity Services (Identity Authentication), SAP Secure Login Service, CommonCryptoLib, and SNC, including X.509 certificate-based mapping via STRUST and CERTRULE
• Manage system landscape activities including transports, client administration, kernel and support package upgrades, and system refreshes
• Monitor system performance and availability, and lead root-cause analysis on Basis-level issues, short dumps, and integration failures
• Partner with our hosting and infrastructure partner on network, firewall, and connectivity changes affecting the SAP landscape
• Maintain compliance with internal security policy and support audit and access-review activities
• Document system architecture, security models, and operational procedures to support a growing, well-governed SAP environment

What You Bring

• 5+ years of hands-on SAP Security & Basis administration experience, including S/4HANA or ECC environments
• Strong working knowledge of SAP security concepts — roles, authorization objects, profile generator (PFCG), and segregation of duties
• Experience with SAP authentication and single sign-on technologies such as SNC, Secure Login Service, SAML, or SAP Cloud Identity Services
• Familiarity with SAP HANA database administration and SQL
• Familiarity with SAP BTP subaccount management and cloud integration concepts
• Comfort working across a hosted or partner-managed infrastructure model (RISE with SAP or similar)
• Strong troubleshooting skills, including the ability to trace issues from application-layer symptoms back to root cause
• Clear communicator who can work across technical and business teams and document decisions for future reference

Nice to Have

• Experience with SAP SuccessFactors or Employee Central Payroll
• Exposure to SAP Datasphere, SAP Analytics Cloud, or SAP Integration Suite
• Experience supporting RISE with SAP or cloud-hosted PCE environment

Why Barton Malow

Barton Malow has spent more than a century building trust-based relationships and delivering value for clients and communities. Joining our Technology team means working on a modern, evolving SAP landscape with the support of a company that invests in the tools and people who keep it running.

Barton Malow is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, disability status, genetic information, protected veteran status, or any other legally protected characteristic.