SAP HANA Security Consultant

SAP HANA Security Consultant (Immediate Joiner)
Experience: 8+ Years
Employment: Contract / Freelance Contract
Location: Remote (India)
Role Summary We are seeking 8+ years experienced SAP HANA Roles & Authorizations consultant to support our HANA Cloud migration. The role covers end-to-end R&A activities across both Native HANA (on-premise) and HANA Cloud (BTP + HANA DB) — from current-state assessment and target role design through build, migration, testing, cutover, and Hypercare — ensuring consistent, controlled, and auditable access throughout the programme, aligned with cloud-native security principles.
Key Responsibilities
Perform discovery, inventory, and current-state assessment of Native HANA — users, roles, authorizations, custom security solutions, service/technical users, and provisioning flows.
Define and design the target R&A model for BTP + HANA Cloud, including Business vs. Non-Business roles and HDI roles.
Create and map roles (Native → Cloud), remove duplicate/redundant roles, and manage dual maintenance for all R&A changes across both landscapes.
Support provisioning (IAS/IPS, GRC/IAG, MySupport) and authentication integrations, and test automated provisioning/deprovisioning workflows.
Conduct gap analysis (Native vs. Cloud) and identify risks such as redundant roles and over-privileged access.
Support SIT/UAT security testing, document findings and resolutions end to end, and obtain stakeholder sign-off.
Execute go-live/cutover activities — freeze on-prem changes, activate cloud roles, validate privileges in production, monitor auth/provisioning jobs, and confirm access for priority users.
Provide Hypercare support and resolve post go-live access/security issues.
Ensure compliance and maintain documentation to Organization standards.
Required Skills & Experience
Proven hands-on experience with SAP HANA security and authorizations (Native HANA), including analytic/system privileges, roles, and HDI/HDI-container roles.
Experience with SAP HANA Cloud and SAP BTP security concepts.
Understanding of SAP identity and access tooling — IAS/IPS, GRC/IAG — and provisioning workflows.
Experience in role redesign, user/role mapping, and dual-maintenance during migrations or transformations.
Familiarity with audit logging, monitoring, and security testing (SIT/UAT).
Strong documentation skills and the ability to work with Organization stakeholders, SAP, and delivery partners.
Desirable
Exposure to custom security solutions (e.g., SecurityBridge) and organization-specific tools.
Prior experience on an on-prem–to–HANA Cloud migration.
Understanding of SSO/MFA concepts (setup owned elsewhere) and compliance/audit requirement

Work arrangement
No