Senior-Lead HANA Database Authorization Security SME

Luxoft Spain

Project

Take ownership of an already-built, production-grade HANA landscape, keep it secure, stable, and performant, and be the definitive escalation authority for any HANA DB security issue.

Responsibilities

  • Provide support to and enablement of the comprehensive architecture, functionality, economics, and architecture compliance of SAP HANA Cloud solution for our client’s technology area.
  • Define solutions together with the architects at both, an enterprise and project level. You will collaborate with various other members of the IT organization / ARTs.
  • You implement SAP HANA Cloud on BTP.
  • Perform strategic monitoring on SAP HANA Cloud, and deliver SME support towards the growing BTP OPS team.
  • Manage and drive quality of the SAP HANA Cloud set-up.
  • Work according to (an develop) best practices and architectural principles defined by the SAP BTP Team.
  • Share your skills / knowledge and help to improve the best practices and enable colleagues.
  • Dare to challenge, collaborate intensively and care for your work and your colleagues.

Skills

Must have

  • 6-10+ years HANA DB administration. Hands-on, production-grade, operational depth.
  • Proven track record inheriting and operating an existing HANA environment, not just building one.
  • Deep HANA security operations expertise: user/role/privilege management, audit policies, SAML/JWT/X.509 authentication, access certification
  • Advanced HANA SQL: provisioning scripts, privilege review queries, audit log interrogation via SYS.USERS, SYS.ROLES, SYS.GRANTED_PRIVILEGES, M_AUDIT_LOG.
  • Independent SAP OSS escalation experience; you raise, manage, and close incidents without handholding
  • Audit-ready communication, able to present HANA access evidence directly to auditors and compliance stakeholders.
  • Familiarity with SAP BTP / Cloud Foundry HANA Cloud operational management.
  • SAP HANA Cloud Security.
  • Manage users, roles, role collections, and database roles (BTP)
  • Configure spaces & HDI container access.
  • Configure cloud application authorizations.
  • Integrate with SAP IAS & IPS.
  • SAP HANA DB Security.
  • Create and maintain database users.
  • Manage catalog and repository roles.
  • Assign and manage system privileges (USER ADMIN, ROLE ADMIN).
  • Assign and manage object privileges (SELECT, INSERT, UPDATE).
  • Assign and manage analytic privileges (row-level security).
  • Handle schema-level access & package authorization.
  • Experience on writing scripts.

Nice to have

  • CyberArk PAM, SAP GRC Access Control.
  • HANA certifications, Datasphere/SAC exposure.
  • Motivated and enthusiastic team player.
  • Strong communication and presentation skills.

Languages

English: C1

Por favor, para solicitar este trabajo visita es.whatjobs.com.