Consultant - SAP HANA Security & Provisioning (SDA)

Job Summary

The SAP Identity & Access Management Specialist is responsible for the daily operational tasks of user lifecycle management within the SAP landscape. This role ensures the secure, efficient, and compliant provisioning, modification, and de-provisioning of user access, acting as a critical line of defence for the company's SAP systems. The specialist will handle a variety of request types, manage approvals, and support testing activities for changes.

Key Responsibilities

Daily Operational Management:

• Termination Requests (Daily):

• Verify the existence of an SAP account for the specified user.
• If no account exists, close the request with appropriate documentation.
• If an account exists,

  manually execute

  the termination process: close, lock, and remove all access rights from the users account in accordance with security policies.

• Process these checks daily, including weekends,

  to ensure timely offboarding.

• Transfer Requests (Daily):

• Execute access changes based on approved transfer requests.

• Email the user's manager

  to confirm and validate access requirements for the new role.
• Maintain meticulous

  tracking of all requests

  for audit and reporting purposes.

• Access Removal for Non-Compliance:

• Promptly action requests to remove access for users based on non-compliance, policy violations, or access recertification outcomes.

• Access Requests (Daily):

• Process new access and modification requests upon receipt of valid approvals.

• Ensure all requests have received the necessary dual approvals from both the User's Manager and the designated Area/Business Process Owner.

• Perform

  manual SAP account updates

  (creates, modifies, and role assignments) as required.

• Incident Requests (Daily):

• Address and resolve access-related incident tickets.
• Manage all

  communications

  with end-users and stakeholders regarding the incident status.
• Process any access

  changes

  required to resolve the incident.

Project & Change Support (As Needed):

• Change Requests & User Stories:

• Collaborate with project teams to implement access-related

  change work

  .
• Create and manage

  transports

  to promote access role changes through the SAP landscape (DEV, QAS, PRD).
• Support testing activities by providing access guidance and ensuring roles function as designed in both

  System Integration Testing (SIT/SUT) and User Acceptance Testing (UAT)

  environments.

Qualifications and Skills

• Required:

• Proven experience in SAP Identity and Access Management.
• Hands-on experience with manual user administration in SAP (SU01, SU10, PFCG).
• Strong understanding of SAP roles, authorizations, and security concepts.
• Meticulous attention to detail with a strong commitment to accuracy and compliance.
• Excellent organizational and tracking skills.
• Effective written and verbal communication skills for corresponding with managers and stakeholders.

• Preferred:

• Experience with an SAP GRC (Governance, Risk, and Compliance) solution (e.g., Access Control).
• Experience managing transports and supporting SAP testing cycles.
• Understanding of ITIL framework, specifically Request, Incident, and Change Management processes