Senior-Lead Hana Database Authorization Security Sme
Role details
Job location
Tech stack
Job description
ProjectTake ownership of an already-built, production-grade HANA landscape, keep it secure, stable, and performant, and be the definitive escalation authority for any HANA DB security issue.ResponsibilitiesProvide support to and enablement of the comprehensive architecture, functionality, economics, and architecture compliance of SAP HANA Cloud solution for our client's technology area.Define solutions together with the architects at both, an enterprise and project level.You will collaborate with various other members of the IT organization / ARTs.You implement SAP HANA Cloud on BTP.Perform strategic monitoring on SAP HANA Cloud, and deliver SME support towards the growing BTP OPS team.Manage and drive quality of the SAP HANA Cloud set-up.Work according to (an develop) best practices and architectural principles defined by the SAP BTP Team.Share your skills / knowledge and help to improve the best practices and enable colleagues.Dare to challenge, collaborate intensively and care for your work and your colleagues.SkillsMust have6-10+ years HANA DB administration.Hands-on, production-grade, operational depth.Proven track record inheriting and operating an existing HANA environment, not just building one.Deep HANA security operations expertise: user/role/privilege management, audit policies, SAML/JWT/X.509 authentication, access certificationAdvanced HANA SQL: provisioning scripts, privilege review queries, audit log interrogation via SYS.USERS, SYS.ROLES, SYS.GRANTEDPRIVILEGES, MAUDIT_LOG.Independent SAP OSS escalation experience; you raise, manage, and close incidents without handholdingAudit-ready communication, able to present HANA access evidence directly to auditors and compliance stakeholders.Familiarity with SAP BTP / Cloud Foundry HANA Cloud operational management.SAP HANA Cloud Security.Manage users, roles, role collections, and database roles (BTP)Configure spaces & HDI container access.Configure cloud application authorizations.Integrate with SAP IAS & IPS.SAP HANA DB Security.Create and maintain database users.Manage catalog and repository roles.Assign and manage system privileges (USER ADMIN, ROLE ADMIN).Assign and manage object privileges (SELECT, INSERT, UPDATE).Assign and manage analytic privileges (row-level security).Handle schema-level access & package authorization.Experience on writing scripts.Nice to haveCyberArk PAM, SAP GRC Access Control.HANA certifications, Datasphere/SAC exposure.Motivated and enthusiastic team player.Strong communication and presentation skills.LanguagesEnglish: C1
Requirements
Experience on writing scripts. Nice to have CyberArk PAM, SAP GRC Access Control. HANA certifications, Datasphere/SAC exposure. Motivated and enthusiastic team player. Strong communication and presentation skills. Languages English: C1