Cloud Platform Administrator, SAP S/4HANA

Gardner White Furniture•Warren, MI

4h•Hybrid

About The Position

Gardner-White Furniture is looking for an SAP S/4HANA Cloud Platform Administrator to own the technical administration of our SAP S/4HANA Cloud Public Edition environment. This is a hands-on role responsible for security, access governance, integration health, and landscape operations across our Development, Quality, and Production tenants. The right candidate knows where Gardner-White’s responsibility begins and ends in a SaaS ERP model and takes that ownership seriously. Our SAP landscape includes S/4HANA Cloud Public Edition (Retail), DataXstream OMS+, SAP OPPS (Omnichannel Promotion Pricing Service), SAP Cloud ALM, and SAP BTP. This role sits at the intersection of the Business Systems team and our SAP implementation partner, responsible for keeping the platform stable, secure, and current through SAP’s semi-annual major releases and ongoing continuous delivery updates.

Requirements

3+ years of SAP system administration experience; direct experience with SAP S/4HANA Cloud Public Edition strongly preferred, or demonstrated experience administering an equivalent cloud ERP platform (SAP BTP, Oracle Fusion Cloud, Workday, or comparable SaaS ERP).
Direct experience with SAP Cloud Identity Services (IAS/IPS), including SSO configuration and corporate IdP integration with Azure AD / Microsoft Entra ID.
Working knowledge of SAP Business Technology Platform (BTP): BTP Cockpit navigation, subaccount management, service entitlements, and Cloud Foundry or Kyma runtime basics.
Experience with SAP transport management in a cloud environment, including Software Collections, SAP Cloud Transport Management Service (cTMS), and release governance.
Strong understanding of SAP role-based authorization concepts: Business Roles, Business Catalogs, restriction types, and SoD principles in the Public Cloud IAM model.
Experience creating and managing SAP Communication Systems, Communication Arrangements, and API-based integrations.
Familiarity with SAP Cloud ALM for both implementation and operations use cases.
Strong analytical and troubleshooting skills for diagnosing integration failures, authorization errors, and system configuration issues.
Ability to communicate technical topics clearly to non-technical stakeholders, and to keep documentation accurate and current.

Nice To Haves

SAP S/4HANA Cloud certification (SAP Certified Technology Associate or Administrator track).
Experience with SAP Central Business Configuration (CBC) project setup and scope management.
Familiarity with SAP Integration Suite (formerly Cloud Platform Integration) for managing iFlows and integration content.
Retail or consumer industry SAP experience, particularly with POS integration or order management systems.
Experience with DataXstream OMS+, SAP OPPS, or comparable SAP retail/commerce add-ons.
Understanding of ABAP Cloud programming model (RESTful Application Programming Model / RAP) to support developer extensibility governance.
Bachelor's degree in Information Systems, Computer Science, Business Administration, or a related field.
Comfortable owning a domain with limited oversight; knows what needs attention and stays ahead of it.
Able to context-switch across security, integration, monitoring, and day-to-day operations without needing a dedicated team behind you.
Precise about access controls and configuration changes, and serious about production stability.
Works well across the Business Systems team, with business stakeholders, and with external partners including SAP Services and ISV vendors.
Genuinely interested in keeping up with how the platform evolves — SAP Public Cloud changes constantly and this role requires staying current

Responsibilities

Manage user onboarding, role assignment, access changes, and offboarding through SAP Fiori administration apps.
Design, build, and transport business roles from the Development/Quality tenant into Production; enforce the policy that business role changes are never made directly in the Production system.
Manage SAP Cloud Identity Services (IAS/IPS) for identity provider configuration and automated user provisioning from HR systems or Microsoft Entra ID.
Configure and maintain Single Sign-On (SSO) integration between SAP IAS and Gardner-White's corporate identity provider (SAML 2.0 / OIDC), ensuring seamless access across S/4HANA Cloud, SAP BTP, and integrated applications.
Conduct periodic access reviews, identify privilege creep, and enforce Segregation of Duties (SoD) principles using SAP's IAM audit and compliance apps.
Configure and enforce Multi-Factor Authentication (MFA) policies aligned with Gardner-White's security standards.
Manage software collections and the full transport lifecycle from Development through Quality to Production for configuration artifacts, business roles, key user extensions, and custom developments.
Understand and manage the transport paths across Gardner-White’s landscape, including CBC/ATO (Adaptation Transport Organizer) for configuration, gCTS / ABAP Cloud transport pipeline for developer extensions, Software Collections for key user changes and business roles, and cTMS for BTP-hosted artifacts.
Establish and enforce change management governance: ensure all changes flow through the proper landscape path, with adequate testing and stakeholder sign-off before production deployment.
Partner with the ERP analyst team to coordinate release windows and minimize operational disruption during transports.
Serve as Gardner-White's primary liaison with SAP for all landscape provisioning activities including system refreshes, tenant copies, sandbox requests, and change requests submitted through the SAP portal.
Manage the 3-system landscape (Development, Quality, Production) in SAP Cloud ALM Landscape Management, maintaining accurate system registration and service key management.
Oversee SAP Central Business Configuration (CBC) project setup, scope activation, and configuration project coordination across tenants.
Coordinate test data refresh activities in the Quality system and ensure non-production environments are kept current for testing and validation purposes.
Manage S-user IDs, SAP support portal access, and the Gardner-White global account entitlements within the SAP BTP Cockpit.
Create and maintain Communication Systems and Communication Arrangements in SAP S/4HANA Cloud to support inbound/outbound API integrations (DataXstream OMS+, SAP OPPS, consumer financing systems, last-mile/delivery platforms, EDI, and other third-party connectors).
Administer SAP BTP subaccounts, service entitlements, and integration flows; manage the BTP Cockpit for all service plan assignments and entitlements required by Gardner-White's landscape.
Monitor integration health and support troubleshooting of communication errors between SAP and connected systems; escalate to integration developers or vendor partners as needed.
Maintain documentation of all communication arrangements, API endpoints, OAuth clients, and integration certificates, including certificate renewal schedules.
Configure and maintain SAP Cloud ALM for Operations: set up Application Monitoring, Business Process Monitoring, and Integration & Exception Monitoring for the Gardner-White SAP landscape.
Monitor system health dashboards daily; triage and respond to alerts, escalating critical issues to SAP via SAP for Me (me.sap.com) with appropriate priority classifications.
Manage the SAP Cloud ALM service key, maintain the connection between S/4HANA Cloud tenants and the ALM tenant, and ensure monitoring coverage is active post-upgrade.
Use SAP Cloud ALM Implementation features (Requirements, Test Management, Deployment) during project phases to support the project team.
Own Gardner-White’s semi-annual SAP upgrade cycle (February and August major releases): communicate upgrade timelines to stakeholders 6 weeks in advance, coordinate content upgrade scheduling in the Quality system, coordinate regression testing with the ERP analyst team using the Test Automation Tool, and manage the production upgrade window.
Review SAP release notes, What's New content, and customer-specific upgrade impact assessments; summarize relevant functional and technical changes for the ERP analyst team and business stakeholders.
Manage maintenance windows and scheduled downtimes in coordination with SAP and internal IT teams.
Ensure all extensions, integrations, and communication arrangements are tested and verified compatible after each major release upgrade before production cutover; monitor bi-weekly Hotfix Collection (HFC) deployments for corrections and Continuous Delivery Service (CDS) innovations between major releases.
Govern Gardner-White’s extensibility strategy across all three layers: in-app key user extensibility (custom fields, layouts, Custom Logic), developer extensibility via ABAP Cloud, and side-by-side extensibility through BTP-hosted apps and APIs.
Manage the Extensibility Cockpit; ensure all custom developments are tracked, documented, tested across the landscape, and properly transported to Production.
Validate that extensions remain stable and compliant through each semi-annual major release upgrade; work with developers or SAP Services to remediate any deprecated APIs or compatibility issues.
Configure and monitor Read Access Logging (RAL) for sensitive data fields in compliance with GDPR, PCI, and Gardner-White data governance policies.
Manage the Audit Log Viewer to track configuration changes, user activities, and security-relevant events; retain logs per policy requirements.
Implement Information Lifecycle Management (ILM) rules for data archiving and retention in compliance with regulatory and business requirements.
Serve as the internal point of contact for SAP security-related SAP Notes, vulnerability patches, and compliance advisories; assess applicability and coordinate remediation.
Create, manage, and prioritize SAP support Cases, Service Requests, and Change Requests via SAP for Me on behalf of Gardner-White, ensuring issues are properly classified and escalated when SLAs are at risk.
Maintain a working relationship with the Gardner-White SAP Customer Engagement Manager (CEM) and SAP Enterprise Architect; participate in scheduled governance calls and SAP advisory sessions.
Monitor SAP Notes, KBAs, and security advisories relevant to the Gardner-White landscape; assess applicability, communicate impacts to the team, and open support cases when action is needed.
Maintain a comprehensive system administration runbook including landscape diagrams, integration architecture, user provisioning procedures, transport procedures, upgrade playbooks, and escalation contacts.
Document all custom configurations, role designs, and deviation from SAP standard in a structured format accessible to the Business Systems team.
Develop training materials for ERP analysts and key users on administrative tasks, Fiori app usage, and self-service capabilities.