> Markdown version of [/jobs/ext/1982727-sap-basis-security-consultant](https://www.wearedevelopers.com/jobs/ext/1982727-sap-basis-security-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # SAP Basis/Security Consultant - **Company:** Adva IT Services, Inc.. - **Location:** Atlanta, GA, United States (Remote available) - **Experience:** Expert - **Contract:** Temporary contract - **Skills:** Baselining, Cloud Computing, IBM DB2, Linux, Intrusion Detection and Prevention, Network Security, Transport Layer, SAP ERP, SAP NetWeaver, Oracle (Applications), SAP (Applications), SAP GRC, SAP HANA, SAP Security, SAP Solution Manager, Security Information and Event Management, Software Vulnerability Management, Network Routers, SAP Application Management Services, Onapsis Platform, SAPBasis, SAP S/4HANA, Vulnerability Analysis - **Published:** August 8, 2026 - **Apply:** https://www.dice.com/job-detail/b46758e2-7fac-4d4e-a3ca-b857356b4163 ## About the Role * 5+ years SAP Basis administration (install, upgrade, transport management, system copies). * Hands-on experience deploying and administering Onapsis (Platform, Assess, Defend, or Cloud Connector) - required, not just familiarity. * Strong SAP security background: authorizations, RFC/gateway hardening, SAP Router, Secure Network Communications (SNC). * Experience with SAP NetWeaver, S/4HANA, and underlying OS/DB (Linux, HANA/Oracle/DB2). * Familiarity with SAP vulnerability management and patch cycles (SAP Security Notes). Preferred * Onapsis certification or documented prior Onapsis deployment(s), with references. * Experience integrating SAP security tooling with SIEM/SOC workflows. * Background in SAP GRC or Threat Detection. * if possible but not required ## Description SAP Basis and Security consultant to install, configure, and operationalize Onapsis solutions (Onapsis Platform - Assess, Defend, Control, and/or Cloud Connector modules) across an SAP landscape. This is a hands-on engagement covering technical installation, security policy configuration, and integration into ongoing operations - not just an assessment or advisory role., * Install and configure Onapsis Platform components (agents, connectors, and the central platform) across SAP ECC/S4HANA landscapes (dev, QA, prod). * Integrate Onapsis with SAP Solution Manager, SIEM tools, and change management processes. * Configure vulnerability scanning, threat detection, and compliance policies (e.g., SAP Security Baseline, NIST, GDPR/SOX-relevant controls) within Onapsis. * Tune detection rules to reduce false positives and align with the organization''''s risk profile. * Establish operational runbooks: alert triage, patch prioritization, and remediation workflows tied to Onapsis findings. * Coordinate with SAP Basis team on system hardening, RFC/gateway security, and transport layer controls surfaced by Onapsis assessments. * Knowledge transfer/documentation for internal team to sustain operations post-engagement. ## Related Videos - [Data Fabric in Action - How to enhance a Stock Trading App with ML and Data Virtualization](https://www.wearedevelopers.com/videos/253-data-fabric-in-action-how-to-enhance-a-stock-trading-app-with-ml-and-data-virtualization) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Discover the open source trio you didn’t expect: .NET and PostgreSQL on Linux](https://www.wearedevelopers.com/videos/2042-discover-the-open-source-trio-you-didn-t-expect-net-and-postgresql-on-linux) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)