Entry SAP Security Administrator

Purpose

To assist with performing specialized technical and analytical support in the area of SAP information technology security to ensure the availability, integrity and security of SMUD's SAP infrastructure.

Nature and Scope

There are four (4) levels in this job classification series that have similar job content but with progressively more challenging degrees and levels of skill, responsibility, knowledge, experience, and qualification requirements: 

Flex classifications (that permit progression from lower-level classes to higher level classes without examination based upon assessment of an individual’s experience and performance) within the series:  

• Entry: Incumbent acquires knowledge, skills and abilities to perform the tasks associated within the series but are not yet demonstrating these at the Journey level.
  Intermediate: Incumbent continues to acquire the knowledge, skills and abilities to perform the tasks associated within the series but are not yet demonstrating these at the Journey level.
• Journey: Incumbent is demonstrating the required skills and knowledge to independently perform the full scope of the job.

Non-Flex classifications (that promote from lower-level classes to higher level classes and require an examination, such as an interview, based upon individual experience and performance) within the series:  

• Senior: Advanced journey level resource who is responsible for advanced assignments, as dictated by the work needing to be performed; may serve in a lead and/or supervisory capacity.

Entry/Intermediate to Journey: Incumbents at the entry (or intermediate) level are required to successfully “progress” to the journey level within 60 months of appointment to remain within the job series. 

Seniors must be hired through a promotional process and do not automatically progress from lower levels in the series. 

Duties and Responsibilities

• Assists with monitoring SAP information technology systems for security and access compliance, participating in the identification of unauthorized access or modification of SAP system information.
• Assists with security incident investigations and helps maintain incidence reports, learning to review audit findings and recommend adjustments to security monitoring tools and procedures to ensure SMUD’s SAP infrastructure is protected.
• Assists in evaluating and improving information technology security systems by reviewing current controls, supporting feasibility and cost analyses, recommending system enhancements, helping implement upgrades, updating procedures, and participating in post-implementation reviews to ensure SMUD’s IT infrastructure supports current and future business needs.
• Supports the configuration, testing and maintenance of SAP security including user profiles, authorizations, and access requests, in collaboration with the Business Process Support Group and BASIS analysts.
• Participates in maintaining documentation for SAP user access processes and helps troubleshoot reported access issues, escalating more complex problems to senior staff.
• Assists with the implementation of SAP security policies and procedures and supports security awareness initiatives.
• Supports department projects by assisting with planning, research and execution of project activities to help achieve project objectives and meet deadlines.
• Performs other related duties as needed; schedules, hours and locations may fluctuate based on business needs

Required Education

• Bachelor's degree majoring in Computer Science, MIS, Business or related field from an accredited college or university, or equivalent experience. If no degree, an additional four (4) years of relevant experience is required.

Required Experience Qualifications

• One or more (1+) year of progressively responsible relevant work experience in technical analysis, design, development, installation, modification, and maintenance of security in an SAP application environment OR six or more (6+) months as a SMUD Intern working within a relevant area.

Knowledge Of

Basic safety policies and practices and standard office procedures; Fundamental concepts of information security, SAP user and role management, and security administration; Techniques and practices for problem identification and resolution, and methods used in planning and organizing work activities; Basic understanding of security within client/server environments and networking fundamentals; Familiarity with data privacy, security regulations, and confidentiality requirements.

Skills To

Use computers and job-relevant software applications; Communicate effectively, both orally and in writing; Establish and maintain effective working relationships internally and externally; Learn and apply new technical concepts under supervision and follow established policies and procedures to resolve issues; Manage assigned work effectively and request assistance as appropriate; Maintain integrity in handling confidential information.

Desirable Qualifications

Desirable Skills and Qualifications:

• Some experience (internship, academic project, or up to 1 year) supporting IT applications, user administration, or basic security functions; familiarity with any SAP module or platform a plus.
• Basic understanding of user provisioning processes, role-based access control, and general IT security concepts.
• Ability to learn and follow established policies for user management, password resets, role assignments, and SAP audit activities.
• Familiarity with troubleshooting methods, documentation, and workflow tools.
• Effective communicator—able to document work clearly and interact with colleagues across IT and business units.
• Interest in developing technical skills specifically in SAP security administration, including access controls, user provisioning, and role management within both on-premise and cloud-based SAP applications.

Desirable Knowledge and Skills:

• General awareness of SAP security concepts: user accounts, authorizations, and access management.
• Exposure to SAP environments (e.g., SAP ERP, S/4HANA, SuccessFactors, BW, Fiori) through coursework, internships, or on-the-job training preferred.
• Ability to assist with basic SAP security tasks, such as account provisioning, role assignment, and password management.
• Willingness to follow and learn established procedures for security monitoring and compliance.
• Curiosity about IT security frameworks, audit practices, and cloud computing platforms.
• Detail-oriented approach to work; able to track tasks and escalate issues for resolution as needed.
• Demonstrated ability to quickly learn new technologies, procedures, and best practices.

Physical Requirements