SAP Basis, Security & IAG Consultant

Job Title: SAP Basis, Security & IAG ConsultantJob Area: Application Management

Location: GBM Dubai HQLanguage Skills: English

Employment Type: Full-TimeTarget Start Date: ASAPJob Summary:We are seeking an experienced and hands-on SAP Basis, Security & IAG Consultant to own the day-to-day administration, security and access governance of GBM’s SAP landscape - keeping systems available, secure, compliant and audit-clean - while leading the SAP Identity Access Governance (IAG) implementation and driving license (FUE) optimization.The ideal candidate will have a strong background in SAP Basis administration and SAP Security role design, combined with practical experience of SAP Cloud IAG, SAP license measurement and audit support.This is a hands-on role combining SLA-driven support with project delivery, and requires both technical depth and control and compliance understanding to keep the S/4HANA, Fiori and BTP landscape stable, governed and audit-ready.

The role reports to the IT Technical Head.

Job Responsibilities

Basis support & operations - manage Basis and Security support tickets within agreed SLA; administer S/4HANA / ECC, Fiori, BTP and Solution Manager across DEV/QAS/PRD, including patching, SAP Notes, client copies, system refresh, backup and recovery.Access rights management - work as support consultant for user provisioning and de-provisioning; design and maintain PFCG roles (single, composite, derived) and Fiori authorizations on a least-privilege basis; troubleshoot authorization issues.Transport & change management - manage transport / change movement requests across the landscape (STMS / CTS+ / ChaRM) with proper approval, sequencing, verification and change-control evidence.EWA reporting - generate and review EarlyWatch Alert reports, priorities red and yellow alerts, take necessary action on priority and track findings to closure.IAG project implementation - deliver the SAP Cloud IAG implementation: application access and role clean-up across SAP and non-SAP systems, set-up of IAG processes (access request and approval workflows, role/risk owners, provisioning rules), SOD ruleset configuration, automated SOD violation reminders, access certification campaigns and integration with IAS / IPS / BTP.License & FUE optimisation - monitor FUE and license consumption against entitlement, classify users correctly, reclaim dormant and duplicate accounts, and act in advance on any sign of over-utilisation; run USMM / LAW and support annual system measurement.Periodic reviews - conduct scheduled user access reviews and transport request reviews with business and application owners, and track remediation to closure.Audit clearance - be accountable for audit readiness and clearance of all activities under this role; provide evidence for access, privileged access and change controls, and close observations within agreed timelines.DMS / Content Server - implement and administer SAP DMS and Content Server to store attachments outside the database, configure repositories and ArchiveLink, and run the data archiving strategy (SARA) to control database growth.Monitoring & upgrades - monitor application performance and availability, manage planned and unplanned downtime, track SAP upgrade, maintenance and security notifications, and take timely action.Documentation & stakeholders - maintain SOPs and role documentation; coordinate with functional teams, infrastructure, internal audit and SAP / partner vendors, and report status and risks to IT management.Qualifications & Education Requirements:Graduate (Bachelor’s degree) in Computer Science, Information Technology, Engineering or equivalent field.Minimum 8 years’ hands-on experience in SAP Basis, SAP Security and IAG implementation and support.Practical experience of SAP IAG - risk analysis, role design, access request workflows, SOD remediation and access certification.Working knowledge of SAP license measurement and FUE / user classification optimization.Experience supporting internal and external audits and closing control observations.Familiar with ITIL-based incident, problem and change management in an SLA-driven support model.Exposure to SAP DMS / Content Server, data archiving, and SAP HANA administration.Strong English communication skills; able to work on-site in Dubai and join immediately or at short notice.Flexible work pattern - available beyond normal office hours, and on weekends or public holidays when required, to support go-lives, cutovers, upgrades, patching windows, month / year-end closing, audits and critical incidents.SAP certification in Basis, Security or GRC / IAG is an added value.Required Expertise:SAP Basis Administration (S/4HANA, ECC, SAP HANA, Fiori Front-End Server and Gateway, SAP BTP, SAP Solution Manager)SAP Security & Authorizations (PFCG single / composite / derived roles, Fiori authorizations, SU01 / SU10 / SUIM, SU53 / STAUTHTRACE)SAP Cloud Identity Access Governance (IAG) implementation - access request and approval workflows, SOD rulesets, access certificationSAP GRC Access Control, and SAP IAS / IPS integrationTransport and change management (STMS / CTS+ / ChaRM)License measurement and FUE optimization (USMM / LAW, Digital Access evaluation)System copy / refresh, patching, upgrades, backup and recoverySAP DMS, Content Server, ArchiveLink and data archiving (SARA)EarlyWatch Alert reporting, performance and availability monitoringAudit support and IT control evidence (access, privileged access, change management)ITIL-based service management in an SLA-driven support model