SAP Senior BASIS Architect (Cybersecurity)

Career Category

Information Systems

Job Description

SAP Senior Basis Architect, SAP Platform

Job Posting Title: SAP Senior Basis Architect

Role Name: SAP Senior Basis Architect

Department Name: Digital Technology and Innovation (DTI)

Role GCF: 5A

ABOUT AMGEN

Amgen harnesses the best of biology and technology to fight the world’s toughest diseases, and make people’s lives easier, fuller and longer. We discover, develop, manufacture and deliver innovative medicines to help millions of patients. Amgen helped establish the biotechnology industry more than 40 years ago and remains on the cutting-edge of innovation, using technology and human genetic data to push beyond what’s known today.

ABOUT THE ROLE

Role Description:

As a Senior SAP Basis Architect with a focus on Cybersecurity within the Amgen Technology and Innovation Centre, you will be responsible for designing, securing, and optimizing Amgen’s global SAP platform in alignment with enterprise architecture and technology strategy. You will ensure the platform’s resilience, regulatory compliance, and protection against evolving cyber threats across SAP and integrated enterprise systems.

In this role, you will lead the design and implementation of secure SAP architectures, applying defense-in-depth principles across network, application, and data layers. You will collaborate closely with Amgen’s Cybersecurity Digital and Trust (InfoSec) team to operationalize vulnerability management, identity and access governance, and secure configuration baselines for SAP S/4HANA, BTP, Cloud ERP (RISE), and supporting applications.

Alongside your cybersecurity responsibilities, you will oversee core SAP Basis operations, ensuring system stability, patch management, performance tuning, and disaster recovery readiness. You will help shape the SAP platform strategy and roadmap, driving modernization, automation, and cloud adoption while maintaining compliance with GxP, SOX, and corporate security frameworks.

Roles & Responsibilities:

• Act as the senior technical authority for Amgen’s SAP Platform, combining deep SAP Basis expertise with strong cybersecurity oversight to ensure stability, resilience, and compliance across all SAP and integrated systems.
• Oversee day-to-day operations across SAP S/4HANA, Cloud ERP (RISE) and BTP landscapes, ensuring system health, high availability, and seamless business continuity across multiple regions and time zones.
• Provide architectural input into Amgen’s SAP modernization roadmap, ensuring that security, performance, and operational excellence remain core pillars of S/4HANA and RISE transformation initiatives.
• Develop, maintain, and operationalize Cybersecurity Runbooks that define SAP-specific incident response, vulnerability remediation, and escalation procedures for both internal and managed service teams.
• Continuously monitor and manage the composite CVSS score for the SAP Platform, maintaining it below the Cybersecurity Digital & Trust (CDT) threshold through proactive risk assessment and timely remediation
• Use Onapsis and other SAP security tools to assess and address vulnerabilities, configuration gaps, and segregation-of-duties (SoD) risks, ensuring consistent compliance with GxP, SOX, and Amgen’s internal security policies.
• Lead SAP Basis operations, including system performance tuning, landscape optimization to ensure continuous availability and scalability of SAP environments.
• Implement and manage SAP Security Patch Tuesday updates, coordinating across Basis, infrastructure, and CDT teams to ensure timely remediation with minimal disruption to operations.
• Partner with Amgen’s CDT organization to conduct penetration tests, tabletop exercises, and readiness drills, validating incident response and strengthening SAP security posture.
• Lead Basis-related initiatives for disaster recovery (DR), backup, and high-availability strategies, ensuring robust recovery processes aligned with enterprise RTO/RPO objectives.
• Collaborate with infrastructure, cloud, and CDT teams to align SAP platform security, network segmentation, and identity management with enterprise architecture and zero-trust principles.
• Host and curate SAP Security Awareness sessions to share insights on new vulnerabilities, emerging threats, and security best practices with Basis, functional, and operations teams.
• Stay current on the SAP and cloud threat landscape, contributing to continuous improvement of platform security and operational readiness through innovation and lessons learned.

Basic Qualifications and Experience

• Doctorate degree OR
• Master’s degree in computer science or STEM majors and 4 to 6 years of IT or SAP related field experience OR
• Bachelor’s degree in computer science or STEM majors and 6 to 8 years of IT or SAP related field experience OR
• Diploma in computer science or STEM majors and 10 to 12 years of IT or SAP related field experience

Functional Skills:

Must-Have Skills (Not more than 3 to 4):

• Demonstrated experience developing and executing secure, enterprise-level SAP platform strategies, encompassing architecture design, Basis operations, automation, and cloud integration to ensure platform resilience and regulatory compliance
• Deep expertise in SAP Basis administration and hardening, including system patching, transport management, user and role security, vulnerability remediation, and secure configuration across S/4HANA, RISE with SAP, and BTP environments.
• Proven ability to implement and govern SAP security frameworks, integrating controls for identity and access management (IAM), encryption, segregation of duties (SoD), and compliance with GxP, SOX, and data protection regulations.
• Strong proficiency in SAP architecture and integration best practices, leveraging tools like Onapsis and SAP Solution Manager for continuous vulnerability assessment, audit readiness, and threat defense.
• Effective leadership and communication skills, with the ability to collaborate with Cybersecurity, Enterprise Architecture, and senior business leaders, translating technical risks and architecture concepts into business-aligned strategies.

Good-to-Have Skills:

• Experience with SAP security tools such as Onapsis, SAP ATC, or GRC for vulnerability and compliance management.
• Familiarity with cloud security and hyperscaler integration (AWS) for SAP workloads under RISE with SAP.
• Knowledge of DevSecOps and automation tools (Terraform, Ansible, Jenkins) to embed security and compliance into SAP operations.
• Understanding of key security frameworks and zero-trust principles for SAP landscapes.
• Exposure to penetration testing and SAP threat monitoring with actionable remediation planning.

Professional Certifications:

• SAP Certified Application Associate - SAP S/4HANA
• SAP Certified Technology Specialist - SAP on Hyperscalers
• Relevant IaaS or Cloud Security Certification

Soft Skills:

• Strategic thinker with the ability to see the big picture, connecting SAP platform strategy, cybersecurity, and business outcomes.
• Strong stakeholder management and collaboration skills, fostering trust and alignment across Cybersecurity, Infrastructure, and Business teams.
• Clear communicator capable of translating complex technical and security concepts for non-technical audiences and senior leadership.
• Creative and innovative in solving technical and security challenges, with a focus on resilience and continuous improvement.
• Effective under pressure, adept at managing multiple priorities and maintaining composure during high-severity operational or security incidents.

EQUAL OPPORTUNITY STATEMENT

Amgen is an Equal Opportunity employer and will consider you without regard to your race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, or disability status.

We will ensure that individuals with disabilities are provided with reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request an accommodation.

.