Skip to content

Portfolio

Ikram Mehmood — SAP BASIS Administrator | SAP HANA | SAP Security

Download CV

Professional profile

SAP BASIS Administrator on the HEC HEDP SAP S/4HANA On-Premise landscape (DEV/QAS/PRD on SUSE Linux) since December 2025 — an environment that serves 80,000+ students and 1,000+ faculty.

My work is hands-on: SAP HANA 2.0 installation with HDBLCM, backup and recovery, and HANA System Replication; SAP application installation with SWPM; SAP PO installation and updates; SAProuter; transports and SAP Notes; and day-to-day production support.

I started in SAP Security and GRC, so I also handle authorization troubleshooting alongside BASIS work. I'm an SAP Certified – Security Administrator with a BS in Software Engineering (CGPA 3.75/4.00).

Current role
SAP BASIS Administrator
Company
TallyMarks Consulting
Location
Islamabad, Pakistan
Focus
SAP S/4HANA, SAP HANA, SAP Security

Experience

  1. TallyMarks Consulting (TMC)

    SAP BASIS Administrator

    Dec 2025 – Present | IslamabadCurrent

    HEC HEDP project — SAP S/4HANA On-Premise on SAP HANA 2.0 and SUSE Linux (DEV/QAS/PRD), serving 80,000+ students and 1,000+ faculty. Official designation: MTO.

    Responsibilities

    Select a responsibility to see the details.

    SAP HANA 2.0 installation and configuration

    Installed SAP HANA 2.0 using HDBLCM and performed the HANA configuration.

    SAP installation with SWPM

    Installed the SAP application using SWPM, then did the SAP-to-HANA database configuration and post-installation activities (some of them together with my lead).

    HANA System Replication

    Configured HANA System Replication from the primary to the secondary system, and check replication status as part of regular HANA monitoring.

    HANA backup and recovery

    Run HANA backups and recoveries in HANA Studio, including planned/test recoveries and real recovery situations. Monitor backup status, disk/data/log usage, alerts, services, database health, and performance and resource usage.

    Production support

    Handle SAP BASIS incidents and service requests within the project SLAs. Resolve what is in BASIS scope and escalate to ABAP, other teams or seniors with my findings. Perform SAP instance start/stop/restart, including planned and unplanned restarts.

    System monitoring, jobs and dumps

    Monitor system health with SM21, SM50/SM66, AL08, ST04 and ST06; manage background jobs and spool (SM36, SM37, SP01); analyse ABAP short dumps in ST22 and pass the error details to the ABAP developer for the fix.

    Parameters, licences, certificates and RFCs

    Work with RZ10/RZ11 profile parameters and SLICENSE licences, and with STRUST, SECSTORE, SM59, STC01 and SCC4 for certificates, secure storage, RFC connections and configuration tasks.

    SUSE Linux operations

    Daily checks on SLES with df -hT, top and free; SAP/HANA start/stop with sapcontrol; file permissions with chmod/chown.

    Transports and SAP Notes

    Create and manage transports in DEV and move them through QAS to PRD in STMS; check transport errors and coordinate with the ABAP team when a code-side fix is needed, then move the corrected transport. Search, download and implement SAP Notes in SNOTE, and release and move the related transports DEV → QAS → PRD.

    SAP PO installation and updates

    Installed SAP Process Orchestration DEV and QAS using SWPM and configured the required components. Worked on PO updates with my lead using SUM: added the system in Maintenance Planner, selected the Java components, prepared the update information and downloaded the media with Download Manager.

    SAProuter

    Registered SAProuter with SAP and configured saprouttab (my lead helped the first time; I have worked on it myself since). Deployed the SAP-provided PSE/certificate (sapgenpse, seclogin, SECUDIR), tested connections and troubleshot connectivity.

    Security and authorizations

    For authorization incidents I check SU53, use STAUTHTRACE when needed, identify the missing authorization or values, maintain the role in PFCG and assign the access. Also work with SU01, SU10 and SUIM. Some days bring 10+ such requests.

    Fiori and OData

    Activate and deactivate ICF services in SICF and troubleshoot Fiori/OData access issues. Exposure to Fiori catalogs, groups/spaces/pages, PFCG catalog mapping and OData service administration (/IWFND/MAINT_SERVICE).

  2. Xplor Group LLC

    SAP Security & GRC Intern (Remote, Part-Time)

    Mar 2024 – Feb 2025 | Remote

    Travelstay247 environment (300+ users). March–August 2024: structured SAP Security/GRC training. September 2024–February 2025: remote client work as an intern, under guidance.

    Responsibilities

    Select a responsibility to see the details.

    User administration

    Created and maintained users with SU01, ran mass user changes with SU10, and checked authorization default values with SU24.

    Role maintenance

    Maintained existing roles in PFCG, including derived and composite roles, created composite roles, and assigned roles to users.

    Authorization troubleshooting

    Investigated missing-authorization issues with SU53 and STAUTHTRACE, then maintained or assigned only the authorizations required instead of giving broad access.

    SAP GRC Access Control

    Used Access Risk Analysis (ARA) under guidance and worked with the SoD results; worked with existing ARM/MSMP access request workflows under supervision.

    Firefighter (EAM)

    Worked with an existing Firefighter setup: assigned and changed Firefighter ID owners and controllers when required.

Technical skills

SAP BASIS

S/4HANA On-Premise (DEV/QAS/PRD)

  • SAP S/4HANA
  • SWPM
  • STMS
  • SNOTE
  • SLICENSE
  • RZ10
  • RZ11
  • SM21
  • SM50
  • SM66
  • AL08
  • ST04
  • ST06
  • SM36
  • SM37
  • SP01
  • ST22
  • STRUST
  • SECSTORE
  • SM59
  • STC01
  • SCC4

SAP HANA 2.0

Installation, backup and replication

  • HDBLCM
  • HANA Studio
  • Backup & Recovery
  • HANA System Replication
  • HANA Monitoring

SAP Security

Users, roles and authorizations

  • SU01
  • SU10
  • SUIM
  • PFCG
  • SU24
  • SU53
  • STAUTHTRACE
  • Derived roles
  • Composite roles

SAP GRC Access Control

Intern level, under guidance

  • Access Risk Analysis
  • SoD
  • ARM/MSMP workflows
  • Firefighter (EAM)

Connectivity & Integration

PO, SAProuter and interfaces

  • SAP PO
  • SAProuter
  • saprouttab
  • sapgenpse
  • SM59 / RFC
  • SUM
  • Maintenance Planner
  • SOAP
  • IDoc
  • SFTP

SAP Fiori

Services and access

  • SICF
  • /IWFND/MAINT_SERVICE
  • OData
  • Catalogs
  • Spaces & pages
  • PFCG catalog mapping

Linux

SUSE Linux Enterprise Server

  • SLES
  • sapcontrol
  • chmod/chown
  • df
  • top
  • free

Programming & Tools

From software engineering

  • Python
  • Bash
  • SQL
  • Git
  • Flutter/Dart

Certifications

SAP Cloud Identity Services — Record of Achievement

Completed
Provider
SAP Learning

SAP GRC Access Control: Access Request Workflows

Participation
Provider
SAP
Issued
Feb 2026

SAP Fiori Authorization Concept

Participation
Provider
SAP
Issued
Feb 2026

SAP S/4HANA Fiori Security

Completed
Provider
Udemy
Issued
Jun 2026

SAP Fiori – Configuring Fiori Environment and Security

Completed
Provider
Udemy
Issued
Jul 2026

Google Cybersecurity: Foundations of Cybersecurity; Networks and Network Security; Manage Security Risks

Completed
Provider
Google / Coursera
Issued
2023

Education

Bachelor of Science in Software Engineering

Sep 2021 – Aug 2025

Mirpur University of Science & Technology (MUST) | Mirpur, Azad Kashmir, Pakistan

CGPA 3.75/4.00 (completed 5 August 2025)

Coursework: Information Security, Database Systems, Operating Systems, Data Science, Software Engineering Management.

Selected work

CLaST-Net: hybrid CNN–ViT for breast cancer histopathology

Research with the Institute of Machine Learning and Data Intelligence, Huizhou University (remote, Nov 2024 – Apr 2025). A hybrid CNN–Vision Transformer model reaching 99.4% accuracy on the BreaKHis breast cancer dataset.

My contribution

Contributed to the design and implementation of the model. Second author; paper under review at IEEE TMI.

  • Python
  • Deep learning
  • CNN
  • Vision Transformer

EEG-based speaker extraction

Co-authored research on extracting a target speaker using EEG signals, with an +8 dB SNR improvement.

My contribution

Co-author; built a FastAPI prototype with under 80 ms inference latency.

  • Python
  • FastAPI
  • Signal processing