SAP Basis Principal Consultant

About Us:
Infosys is a global leader in next-generation digital services and consulting. Over 320,000 of our people work to amplify human potential and create the next opportunity for people, businesses and communities. We enable clients in 59 countries to navigate their digital transformation. With over four decades of experience in managing the systems and workings of global enterprises, we expertly steer clients, as they navigate their digital transformation powered by cloud and AI. We enable them with an AI-first core, empower the business with agile digital at scale and drive continuous improvement with always-on learning through the transfer of digital skills, expertise, and ideas from our innovation ecosystem. We are deeply committed to being a well-governed, environmentally sustainable organization where diverse talent thrives in an inclusive workplace.
Visit www.infosys.com to see how Infosys (NYSE: INFY) can help you navigate your next.

• SAP BTP Platform Engineering & Automation

• Design, implement, and maintain SAP BTP platform services across multiple landscapes.
• Develop and manage Infrastructure-as-Code (IaC) solutions using Terraform to ensure BTP environments are provisioned in a repeatable, standardized, and consistent manner.
• Reduce configuration drift, operational risk, and manual deployment effort through automation.
• Lead and support SAP BTP Automation initiatives, identifying opportunities to improve efficiency, consistency, and service delivery.
• Establish platform standards, governance controls, and reusable deployment patterns.
  

• SAP BTP Security & Identity Management

• Design and maintain SAP BTP Trust Configurations and enterprise identity federation.
• Lead migration activities from SAML-based authentication to OpenID Connect (OIDC).
• Implement secure authentication and authorization models aligned with organizational security standards.
• Support and troubleshoot multi-factor authentication (MFA) and two-factor authentication (2FA) issues across SAP BTP environments.
• Define identity and access management best practices using SAP Cloud Identity Services (IAS and IPS).
  

• SAP BTP Credential & Secrets Management

• Implement and maintain SAP BTP Credential Store solutions.
• Establish secure processes for:
  • Service key creation
  • Credential rotation
  • Credential renewal
  • Secrets lifecycle management
• Improve security posture by reducing risks associated with manual credential management.

• SAP Cloud ALM Implementation & Operations

• Lead SAP Cloud ALM implementation and configuration activities.
• Support Implementation, Transformation, and Service operations within SAP RISE landscapes.
• Configure and maintain monitoring, business process observability, integrations, and operational dashboards.
• Establish operational standards and runbook procedures for Cloud ALM services.

• GitHub & Configuration Management

• Manage SAP BTP configuration assets through GitHub repositories.
• Maintain:
  • Terraform code
  • BTP platform configurations
  • Cloud Identity Services configurations
  • IPS JSON transformations
  • CIS compliance definitions
  • Operational and support documentation
• Implement and enforce:
  • Version control standards
  • Branching strategies
  • Pull request review processes
  • Approval workflows
  • Release traceability and audit requirements

• Monitoring, Alerting & Platform Operations

• Configure monitoring and alerting for SAP BTP resources and Cloud Foundry applications.
• Implement monitoring for service key lifecycle events and expiration management.
• Proactively identify and resolve platform performance, security, and availability issues.
• Establish platform observability and operational dashboards.
  

• SAP Cloud Identity Services Administration

• Monitor SAP Cloud Identity Authentication Service (IAS) and Identity Provisioning Service (IPS).
• Configure alerts for critical identity-related events and specific authentication error codes.
• Analyse application authentication metrics including login trends and usage patterns.
• Design authentication architectures leveraging inheritance and reusable configurations.
• Develop migration strategies and best practices for moving application configurations between IAS tenants.
• Support IPS transformation development and troubleshooting.
  

• Operational Excellence

• Produce and maintain technical documentation, standards, architecture diagrams, operating procedures, and support guides.
• Participate in platform governance and continuous improvement initiatives.
• Provide Level 2 and Level 3 support for SAP BTP and Cloud Identity services.
• Collaborate with SAP functional, security, infrastructure, and application teams.

• Minimum 10+ years of hands-on experience in SAP Basis
• SAP Technologies
  • Strong SAP Basis administration experience.
  • Hands-on experience with:
  • SAP Business Technology Platform (BTP)
  • SAP Cloud Foundry
  • SAP RISE
  • SAP Cloud ALM
  • SAP Cloud Identity Authentication Service (IAS)
  • SAP Identity Provisioning Service (IPS)
• Monitoring & Operations
  • Experience configuring monitoring, alerting, and observability for SAP BTP services.
  • Strong troubleshooting skills across platform, identity, and connectivity layers.
  • Knowledge of service key lifecycle management and credential security best practices.

• Strong leadership, communication, and interpersonal skills with the ability to influence stakeholders at all levels.
• Ability to manage multiple priorities, adapt to changing business needs, and work effectively in a fast-paced, dynamic environment.
• Excellent problem-solving and conflict resolution skills.
• Strong organizational and time management abilities

• Bachelor's degree in business, Information Technology, or a related field (a Master's degree or relevant certifications is a plus).
• SAP Certified Technology Associate certifications.
• SAP BTP certification.
• SAP Cloud ALM certification.
• Experience working in large enterprise SAP RISE environments.
• Experience implementing governance and compliance standards for cloud platforms.
• Knowledge of DevOps practices and cloud security frameworks.
  

• Income Protection Insurance
• Paid Parental and Volunteer leaves
• Employee Assistance Program (EAP)
• Flexible working arrangements (hybrid, reviewed case-by-case basis)
• Health Insurance Discount and Well-being Program
• Access to Fitness and Gym Memberships
• Salary packaging and novated leasing