SAP HANA Security Consultant

A career in IBM Consulting is built on long-term client relationships and close collaboration worldwide. You'll work with leading companies across industries, helping them shape their hybrid cloud and AI journeys. With support from our strategic partners, robust IBM technology, and Red Hat, you'll have the tools to drive meaningful change and accelerate client impact. At IBM Consulting, curiosity fuels success. You'll be encouraged to challenge the norm, explore new ideas, and create innovative solutions that deliver real results. Our culture of growth and empathy focuses on your long-term career development while valuing your unique skills and experiences. Primary Responsibilities SAP HANA Security Administration Provide L2/L3 application support for SAP HANA security-related incidents, service requests, problems, and changes. Administer SAP HANA users, roles, privileges, and authorization objects across production and non-production environments. Create, modify, deactivate, and maintain HANA user accounts in accordance with established security policies and procedures. Design, implement, and maintain role-based access controls (RBAC) following the principle of least privilege. Manage system, object, analytic, package, application, and other applicable HANA privileges. Support the administration of catalog roles, repository roles, and technical users as applicable to the HANA environment. Perform authorization analysis and troubleshoot user access issues, authorization failures, and privilege-related incidents. Review and remediate excessive, inappropriate, or obsolete access.   Application Maintenance & Production Support Provide timely resolution of SAP HANA security incidents in accordance with defined SLAs and operational procedures. Monitor and investigate security-related alerts, failed authentication attempts, authorization errors, and unusual access activities. Perform root-cause analysis (RCA) for recurring security and authorization issues. Identify permanent corrective actions to prevent recurring production incidents. Support emergency access and critical production incidents while maintaining appropriate security controls and auditability. Participate in incident, problem, change, and service-request management processes. Perform security-related changes in accordance with established change and release management procedures. Support production deployments, system refreshes, upgrades, patches, and migrations from a security perspective. Coordinate with SAP Basis, infrastructure, application, database, and functional teams to resolve cross-functional security issues. Participate in on-call or after-hours support when required for critical production issues.   User & Access Management Support user provisioning, modification, lock/unlock, termination, and periodic access reviews. Implement and maintain role assignment and segregation-of-duties (SoD) controls. Review access requests and validate that requested privileges comply with security and authorization standards. Support periodic user access reviews and role certification activities. Analyze and resolve authorization issues resulting from changes to applications, database objects, views, procedures, or underlying data models. Maintain appropriate controls for technical, service, communication, and privileged users. Support password, authentication, and account-security policies.   Security Governance & Compliance Support internal and external security audits, compliance assessments, and regulatory requirements. Provide evidence and reports related to user access, roles, privileges, and security configurations. Identify security risks and recommend remediation actions. Conduct periodic reviews of privileged access and sensitive authorizations. Support implementation and maintenance of SAP security standards, policies, procedures, and controls. Maintain security documentation, role matrices, access procedures, and operational runbooks. Ensure security changes are properly documented and traceable through the organization's change-management process.   Security Monitoring & Continuous Improvement Monitor HANA security configuration and identify potential vulnerabilities or misconfigurations. Analyze security logs and audit information to investigate suspicious or unauthorized activities. Support the configuration and maintenance of SAP HANA auditing and security monitoring. Identify opportunities to automate repetitive security administration and monitoring activities. Recommend improvements to role design, access processes, security controls, and operational procedures. Participate in security assessments and remediation initiatives. Contribute to knowledge management, technical documentation, and knowledge-transfer activities. Mentor junior SAP HANA/SAP Security consultants where required.   Must-Have Skills SAP HANA Security 5+ years of experience in SAP Security, with strong hands-on experience in SAP HANA security administration. Strong knowledge of SAP HANA users, roles, privileges, and authorization concepts. Hands-on experience with: HANA users and user administration Roles and role assignment System privileges Object privileges Analytic privileges Package/application privileges Schema and database object authorizations Strong experience troubleshooting HANA authorization and access-related issues. Good understanding of SAP HANA security architecture. Experience managing privileged and technical users. Experience with role design and least-privilege principles. Strong understanding of authentication and authorization mechanisms. Experience with SAP HANA auditing, security logs, and audit analysis. Experience supporting SAP HANA security in production environments.   Application Maintenance & Support Proven experience working in an Application Maintenance & Support / Managed Services environment. Experience providing L2/L3 production support. Strong knowledge of Incident, Problem, Change, and Service Request Management. Experience working with SLA-driven support models. Strong troubleshooting and root-cause-analysis skills. Ability to handle and prioritize critical production security incidents. Experience coordinating with Basis, infrastructure, functional, application, and database teams. Ability to work independently and take ownership of security incidents through resolution. Strong documentation and knowledge-management skills. Willingness to participate in on-call/shift support, when required.   SAP Authorization & Security Strong understanding of SAP authorization concepts. Experience with SAP role design, authorization objects, and access controls. Understanding of Segregation of Duties (SoD) and sensitive access. Experience supporting periodic user and role access reviews. Knowledge of privileged-access management concepts. Experience supporting internal/external SAP security audits. Ability to analyze access requirements and translate business requirements into appropriate security controls.   General Technical Skills Good understanding of SAP HANA database architecture and SQL concepts. Experience working with SAP HANA Studio, SAP HANA Cockpit, or equivalent HANA administration/security tools. Strong analytical and problem-solving skills. Good communication skills with the ability to explain security issues to both technical and non-technical stakeholders. Strong attention to detail and understanding of security risks associated with production systems.   Nice-to-Have Skills SAP Security & Identity Experience with SAP S/4HANA security and authorization concepts. Experience with SAP Fiori and Fiori security/authorization. Knowledge of SAP Gateway and OData security. Experience with SAP Business Technology Platform (BTP) security. Knowledge of SAP Identity Authentication Service (IAS) and Identity Provisioning Service (IPS). Experience with SAP Cloud Identity Access Governance (IAG). Experience with SAP Access Control and Governance, Risk, and Compliance (GRC). Knowledge of SAP Single Sign-On (SSO) and enterprise identity-management solutions. Experience integrating SAP HANA with enterprise LDAP/Active Directory environments. Security & Compliance Experience with SoD analysis and remediation. Knowledge of privileged access management (PAM) solutions. Experience supporting ISO 27001, SOC, SOX, GDPR, or other relevant compliance requirements. Familiarity with vulnerability management and security assessment processes. Experience responding to security audit findings and implementing remediation plans. Knowledge of security logging, SIEM integration, and security monitoring tools. Technical & Operational Experience with SAP HANA upgrades, migrations, system copies, and refreshes from a security perspective. Knowledge of SAP HANA high-availability and disaster-recovery environments. Experience with HANA database encryption, data-at-rest encryption, and secure communications. Understanding of TLS/SSL certificates and secure network communication. Experience with automation or scripting for security administration. Knowledge of SQL for security analysis and troubleshooting. Familiarity with ITIL best practices and IT service-management tools such as ServiceNow, Jira, or equivalent platforms. Experience with CI/CD and DevSecOps concepts. SAP HANA / SAP Security certification. Philippines Consulting Hybrid Professional QUEZON CITY, PH QUEZON CITY (0891) IBM Solutions Delivery, Inc. Access Control Active Directory Administration Application Security Architecture Auditing Automation Business Requirements Communication Design Documentation Governance, Risk and Compliance Infrastructure Integration Atlassian Jira Logging Maintenance Managed Services Management Production Support Provisioning Remediation Structured Query Language Sap Fiori Sarbanes-Oxley Compliance Scripting Security Security Audits Security Information and Event Management ServiceNow Troubleshooting Vulnerability Management Detail-oriented Information Technology Infrastructure Library International Accounting Standards SAP SAP Suite für Hochleistungsanalyseanwendung Encryption DevSecOps General Data Protection Regulation Audit Authorizations Compliance Continuous Integration/Continuous Delivery Security Operations Center Privileged Access Management Request Management Single Sign-on Technical Proficiency Lightweight Directory Access Protocol Risk Governance System Security Analysis Security Controls Authentication Network Communication International Organization for Standardization Perspective Technology Database Architecture Database Encryption SAP Security Secure Sockets Layer Transport Layer Security SAP Gateway Open Data Protocol