Sap Basis Consultant
Role & responsibilities
The SAP BTP Admin (Basis) is responsible for end-to-end administration, security, connectivity, and operations of SAP Business Technology Platform across subaccounts, environments (Cloud Foundry / Kyma, as applicable), and integrations with SAP and non-SAP systems. The role ensures platform availability, compliance, governance, and smooth delivery support for projects and BAU.
Key Responsibilities
Platform Administration & Governance
Provision and administer global accounts, directories, subaccounts, regions, and entitlements/quotas.
Set up and enforce naming standards, tagging/labels, account model, and governance controls.
Manage service subscriptions/instances (e.g., Integration Suite, Destination, Connectivity, XSUAA, IAS/IPS, Event Mesh, HANA Cloud, ABAP environment where relevant).
Perform capacity/consumption monitoring and license/entitlement utilization reporting.
Security & Identity (BTP + SAP Identity Services)
Configure and manage SAP IAS/IPS (or corporate IdP) integration, SSO, federation, and user lifecycle sync.
Manage role collections, authorizations, and least-privilege access model for subaccounts and services.
Configure XSUAA security artifacts where needed (trust configuration, role templates/collections support).
Support audit/compliance requirements (access reviews, logging retention, segregation of duties).
Connectivity & Network Setup
Configure and operate SAP BTP Connectivity service, Cloud Connector, and Destinations (on-prem and cloud).
Support connectivity patterns: RFC/HTTP(S)/OData, Principal Propagation, mTLS, proxies, allowlists.
Coordinate with network/security teams for firewall rules, certificates, TLS settings, and routing
.
Transport & Change Management
Support Cloud Transport Management (cTMS) setup and operations where applicable.
Manage landscape setup (Dev/Test/Prod subaccounts), deployment pipelines, and promotion controls.
Standardize operational runbooks for deployments, rollback, and cutover support.
Operations / Monitoring / Incident Management
Configure monitoring and alerting using BTP cockpit, SAP Cloud ALM / Focused Run, and/or enterprise monitoring tools.
Troubleshoot platform/service issues: authentication, connectivity, entitlement limits, subscription failures, runtime issues.
Coordinate with SAP support (OSS incidents), vendors, and internal teams; manage RCA and problem management.
Certificates, Keys, and TLS
Manage certificate lifecycle (renewals, trust stores, keystores) for BTP endpoints and integrations.
Implement and maintain TLS/mTLS for secure communication between BTP and connected systems.
Documentation & Knowledge Management
Maintain platform documentation: account model, connectivity diagrams, access model, operational SOPs.
Contribute to standard templates and best practices for onboarding new BTP services.
Required Skills & Experience
5+ years in SAP Basis / Platform Administration, with 2+ years hands-on in SAP BTP administration.
Strong hands-on with BTP Cockpit, subaccount setup, entitlements, service provisioning.
Solid understanding of Cloud Foundry concepts (orgs/spaces, app lifecycle) and/or Kyma (if used).
Hands-on with Connectivity, Cloud Connector, Destinations, and troubleshooting integration issues.
Strong security/IAM knowledge: IAS/IPS, SSO (SAML/OAuth2), role collections, authorization concepts.
Working knowledge of TLS, certificates, and enterprise security processes.
SAP Integration Suite administration and package/artifacts deployments.
Experience supporting cutovers, go-lives, and BAU operations in a regulated enterprise environment.
Knowledge on Data streaming and BTP Adobe forms service configuration.
