SAP Certified – Security Administrator
Certified- Provider
- SAP
- Issued
- 17 Aug 2026
- Valid until
- 18 Aug 2027
Ikram Mehmood — SAP BASIS Administrator | SAP HANA | SAP Security
SAP BASIS Administrator on the HEC HEDP SAP S/4HANA On-Premise landscape (DEV/QAS/PRD on SUSE Linux) since December 2025 — an environment that serves 80,000+ students and 1,000+ faculty.
My work is hands-on: SAP HANA 2.0 installation with HDBLCM, backup and recovery, and HANA System Replication; SAP application installation with SWPM; SAP PO installation and updates; SAProuter; transports and SAP Notes; and day-to-day production support.
I started in SAP Security and GRC, so I also handle authorization troubleshooting alongside BASIS work. I'm an SAP Certified – Security Administrator with a BS in Software Engineering (CGPA 3.75/4.00).
SAP BASIS Administrator
Dec 2025 – Present | IslamabadCurrent
HEC HEDP project — SAP S/4HANA On-Premise on SAP HANA 2.0 and SUSE Linux (DEV/QAS/PRD), serving 80,000+ students and 1,000+ faculty. Official designation: MTO.
Responsibilities
Select a responsibility to see the details.
Installed SAP HANA 2.0 using HDBLCM and performed the HANA configuration.
Installed the SAP application using SWPM, then did the SAP-to-HANA database configuration and post-installation activities (some of them together with my lead).
Configured HANA System Replication from the primary to the secondary system, and check replication status as part of regular HANA monitoring.
Run HANA backups and recoveries in HANA Studio, including planned/test recoveries and real recovery situations. Monitor backup status, disk/data/log usage, alerts, services, database health, and performance and resource usage.
Handle SAP BASIS incidents and service requests within the project SLAs. Resolve what is in BASIS scope and escalate to ABAP, other teams or seniors with my findings. Perform SAP instance start/stop/restart, including planned and unplanned restarts.
Monitor system health with SM21, SM50/SM66, AL08, ST04 and ST06; manage background jobs and spool (SM36, SM37, SP01); analyse ABAP short dumps in ST22 and pass the error details to the ABAP developer for the fix.
Work with RZ10/RZ11 profile parameters and SLICENSE licences, and with STRUST, SECSTORE, SM59, STC01 and SCC4 for certificates, secure storage, RFC connections and configuration tasks.
Daily checks on SLES with df -hT, top and free; SAP/HANA start/stop with sapcontrol; file permissions with chmod/chown.
Create and manage transports in DEV and move them through QAS to PRD in STMS; check transport errors and coordinate with the ABAP team when a code-side fix is needed, then move the corrected transport. Search, download and implement SAP Notes in SNOTE, and release and move the related transports DEV → QAS → PRD.
Installed SAP Process Orchestration DEV and QAS using SWPM and configured the required components. Worked on PO updates with my lead using SUM: added the system in Maintenance Planner, selected the Java components, prepared the update information and downloaded the media with Download Manager.
Registered SAProuter with SAP and configured saprouttab (my lead helped the first time; I have worked on it myself since). Deployed the SAP-provided PSE/certificate (sapgenpse, seclogin, SECUDIR), tested connections and troubleshot connectivity.
For authorization incidents I check SU53, use STAUTHTRACE when needed, identify the missing authorization or values, maintain the role in PFCG and assign the access. Also work with SU01, SU10 and SUIM. Some days bring 10+ such requests.
Activate and deactivate ICF services in SICF and troubleshoot Fiori/OData access issues. Exposure to Fiori catalogs, groups/spaces/pages, PFCG catalog mapping and OData service administration (/IWFND/MAINT_SERVICE).
SAP Security & GRC Intern (Remote, Part-Time)
Mar 2024 – Feb 2025 | Remote
Travelstay247 environment (300+ users). March–August 2024: structured SAP Security/GRC training. September 2024–February 2025: remote client work as an intern, under guidance.
Responsibilities
Select a responsibility to see the details.
Created and maintained users with SU01, ran mass user changes with SU10, and checked authorization default values with SU24.
Maintained existing roles in PFCG, including derived and composite roles, created composite roles, and assigned roles to users.
Investigated missing-authorization issues with SU53 and STAUTHTRACE, then maintained or assigned only the authorizations required instead of giving broad access.
Used Access Risk Analysis (ARA) under guidance and worked with the SoD results; worked with existing ARM/MSMP access request workflows under supervision.
Worked with an existing Firefighter setup: assigned and changed Firefighter ID owners and controllers when required.
S/4HANA On-Premise (DEV/QAS/PRD)
Installation, backup and replication
Users, roles and authorizations
Intern level, under guidance
PO, SAProuter and interfaces
Services and access
SUSE Linux Enterprise Server
From software engineering
Sep 2021 – Aug 2025
Mirpur University of Science & Technology (MUST) | Mirpur, Azad Kashmir, Pakistan
CGPA 3.75/4.00 (completed 5 August 2025)
Coursework: Information Security, Database Systems, Operating Systems, Data Science, Software Engineering Management.
Research with the Institute of Machine Learning and Data Intelligence, Huizhou University (remote, Nov 2024 – Apr 2025). A hybrid CNN–Vision Transformer model reaching 99.4% accuracy on the BreaKHis breast cancer dataset.
My contribution
Contributed to the design and implementation of the model. Second author; paper under review at IEEE TMI.
Co-authored research on extracting a target speaker using EEG signals, with an +8 dB SNR improvement.
My contribution
Co-author; built a FastAPI prototype with under 80 ms inference latency.