SAP HANA Security Consultant (BTP Security)

Role Summary We are seeking 8+ years experienced SAP HANA Roles & Authorizations consultant to support our HANA Cloud migration. The role covers end-to-end R&A activities across both Native HANA (on-premise) and HANA Cloud (BTP + HANA DB) — from current-state assessment and target role design through build, migration, testing, cutover, and Hypercare — ensuring consistent, controlled, and auditable access throughout the programme, aligned with cloud-native security principles.

Key Responsibilities

• Perform discovery, inventory, and current-state assessment of Native HANA — users, roles, authorizations, custom security solutions, service/technical users, and provisioning flows.
• Define and design the target R&A model for BTP + HANA Cloud, including Business vs. Non-Business roles and HDI roles.
• Create and map roles (Native → Cloud), remove duplicate/redundant roles, and manage dual maintenance for all R&A changes across both landscapes.
• Support provisioning (IAS/IPS, GRC/IAG, MySupport) and authentication integrations, and test automated provisioning/deprovisioning workflows.
• Conduct gap analysis (Native vs. Cloud) and identify risks such as redundant roles and over-privileged access.
• Support SIT/UAT security testing, document findings and resolutions end to end, and obtain stakeholder sign-off.
• Execute go-live/cutover activities — freeze on-prem changes, activate cloud roles, validate privileges in production, monitor auth/provisioning jobs, and confirm access for priority users.
• Provide Hypercare support and resolve post go-live access/security issues.
• Ensure compliance and maintain documentation to Organization standards.

Required Skills & Experience

• Proven hands-on experience with SAP HANA security and authorizations (Native HANA), including analytic/system privileges, roles, and HDI/HDI-container roles.
• Experience with SAP HANA Cloud and SAP BTP security concepts.
• Understanding of SAP identity and access tooling — IAS/IPS, GRC/IAG — and provisioning workflows.
• Experience in role redesign, user/role mapping, and dual-maintenance during migrations or transformations.
• Familiarity with audit logging, monitoring, and security testing (SIT/UAT).
• Strong documentation skills and the ability to work with Organization stakeholders, SAP, and delivery partners.

Desirable

• Exposure to custom security solutions (e.g., SecurityBridge) and organization-specific tools.
• Prior experience on an on-prem–to–HANA Cloud migration.
• Understanding of SSO/MFA concepts (setup owned elsewhere) and compliance/audit requirements.