Role Summary We are seeking 8+ years experienced SAP HANA Roles & Authorizations consultant to support our HANA Cloud migration. The role covers end-to-end R&A; activities across both Native HANA (on-premise) and HANA Cloud (BTP + HANA DB) — from current-state assessment and target role design through build, migration, testing, cutover, and Hypercare — ensuring consistent, controlled, and auditable access throughout the programme, aligned with cloud-native security principles. Key Responsibilities

Perform discovery, inventory, and current-state assessment of Native HANA — users, roles, authorizations, custom security solutions, service/technical users, and provisioning flows.

Define and design the target R&A; model for BTP + HANA Cloud, including Business vs. Non-Business roles and HDI roles.

Create and map roles (Native → Cloud), remove duplicate/redundant roles, and manage dual maintenance for all R&A; changes across both landscapes.

Support provisioning (IAS/IPS, GRC/IAG, MySupport) and authentication integrations, and test automated provisioning/deprovisioning workflows.

Conduct gap analysis (Native vs. Cloud) and identify risks such as redundant roles and over-privileged access.

Support SIT/UAT security testing, document findings and resolutions end to end, and obtain stakeholder sign-off.





Execute go-live/cutover activities — freeze on-prem changes, activate cloud roles, validate privileges in production, monitor auth/provisioning jobs, and confirm access for priority users.

Provide Hypercare support and resolve post go-live access/security issues.

Ensure compliance and maintain documentation to Organization standards.

Required Skills & Experience

Proven hands-on experience with SAP HANA security and authorizations (Native HANA), including analytic/system privileges, roles, and HDI/HDI-container roles.

Experience with SAP HANA Cloud and SAP BTP security concepts.

Understanding of SAP identity and access tooling — IAS/IPS, GRC/IAG — and provisioning workflows.

Experience in role redesign, user/role mapping, and dual-maintenance during migrations or transformations.

Familiarity with audit logging, monitoring, and security testing (SIT/UAT).

Robust documentation skills and the ability to work with Organization stakeholders, SAP, and delivery partners. Desirable

Exposure to custom security solutions (e.g., SecurityBridge) and organization-specific tools.

Prior experience on an on-prem–to–HANA Cloud migration.

Understanding of SSO/MFA concepts (setup owned elsewhere) and compliance/audit requirements.

📌 SAP HANA Security Consultant (BTP) (India)
🏢 bytespoke
📍 India