09 Aug
|
bytespoke
|
India
Role Summary
We are seeking 8+ years experienced SAP HANA Roles & Authorizations consultant to support our HANA Cloud migration. The role covers end-to-end R&A; activities across both Native HANA (on-premise) and HANA Cloud (BTP + HANA DB) — from current-state assessment and target role design through build, migration, testing, cutover, and Hypercare — ensuring consistent, controlled, and auditable access throughout the programme, aligned with cloud-native security principles.
Key Responsibilities
- Perform discovery, inventory, and current-state assessment of Native HANA — users, roles, authorizations, custom security solutions, service/technical users, and provisioning flows.
- Define and design the target R&A; model for BTP + HANA Cloud, including Business vs. Non-Business roles and HDI roles.
- Create and map roles (Native → Cloud), remove duplicate/redundant roles, and manage dual maintenance for all R&A; changes across both landscapes.
- Support provisioning (IAS/IPS, GRC/IAG, MySupport) and authentication integrations, and test automated provisioning/deprovisioning workflows.
- Conduct gap analysis (Native vs. Cloud) and identify risks such as redundant roles and over-privileged access.
- Support SIT/UAT security testing, document findings and resolutions end to end, and obtain stakeholder sign-off.
- Execute go-live/cutover activities — freeze on-prem changes, activate cloud roles, validate privileges in production, monitor auth/provisioning jobs, and confirm access for priority users.
- Provide Hypercare support and resolve post go-live access/security issues.
- Ensure compliance and maintain documentation to Organization standards.
Required Skills & Experience
- Proven hands-on experience with SAP HANA security and authorizations (Native HANA), including analytic/system privileges, roles, and HDI/HDI-container roles.
- Experience with SAP HANA Cloud and SAP BTP security concepts.
- Understanding of SAP identity and access tooling — IAS/IPS, GRC/IAG — and provisioning workflows.
- Experience in role redesign, user/role mapping, and dual-maintenance during migrations or transformations.
- Familiarity with audit logging, monitoring, and security testing (SIT/UAT).
- Solid documentation skills and the ability to work with Organization stakeholders, SAP, and delivery partners.
Desirable
- Exposure to custom security solutions (e.g., SecurityBridge) and organization-specific tools.
- Prior experience on an on-prem–to–HANA Cloud migration.
- Understanding of SSO/MFA concepts (setup owned elsewhere) and compliance/audit requirements.
📌 SAP HANA Security Consultant (BTP) (India)
🏢 bytespoke
📍 India