Security Architect

Project Role : Security Architect
Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.
Must have skills : SAP Security
Good to have skills : NA
Minimum 12 year(s) of experience is required
Educational Qualification : 15 years full time education

Summary:
Own the stability, performance, and evolution of the SAP landscape — spanning on-premise S/4HANA, SAP HANA, BTP, and cloud-hosted environments (RISE with SAP, AWS, Azure, GCP). Hands-on yet architecturally-minded: equally comfortable tuning HANA memory and presenting a cloud migration roadmap to IT leadership.
Own SAP identity, access control, authorisation design, and compliance governance across S/4HANA, Fiori, and BTP. A high-trust, high-visibility role at the intersection of deep SAP technical security and regulatory accountability — with direct ownership of GRC Access Control, SoD governance, Fiori/BTP identity, and audit evidence for SOX, GDPR, and ISO 27001.

Roles & Responsibilities:
Platform Administration
- Manage full SAP landscape (DEV/QA/PRD) — system copies, client copies, refreshes
- Administer SAP HANA: backup/recovery, space, delta merge, HSR, performance, memory tuning
- Configure and maintain HA/DR — System Replication, Pacemaker, MCOD — with tested failover runbooks
- Plan and execute upgrades, SPS updates, and kernel patches with minimal downtime
- Manage TMS (CTS/CTS+/gCTS) — transport routes, import queues, auditable change delivery
Cloud, AI & Governance
- Manage RISE with SAP and hyperscaler SAP environments with SAP Cloud ALM
- Use AI tools (Copilot, Claude, Joule) for log analysis, incident triage, runbook generation, capacity prediction
- Build automation scripts (Python/Shell) for health checks, backup validation, and monitoring
- Contribute to the SAP Change Advisory Board — reviewing and scheduling changes
- Support audits: change logs, backup evidence, and configuration documentation

Professional & Technical Skills:
Essential
- 5+ years SAP BASIS — ECC, S/4HANA, or BW/4HANA
- Deep SAP HANA DBA — HSR, backup/recovery, performance tuning
- Linux/Unix OS administration for SAP environments
- Transport management, upgrade planning, SPS delivery
- Cloud SAP — RISE with SAP, Azure, AWS, or GCP
- Active AI tool user — Copilot, Claude, ChatGPT, or similar
- Scripting capability — Python, Bash, or equivalent
Desirable
- SAP Certified Technology Associate — HANA 2.0 or BASIS
- gCTS and DevSecOps pipeline integration
- SAP BTP Cloud Connector administration
- Zero-downtime maintenance (ZDM/nZDM) experience
- ITIL v4 familiarity
- Regulated industry — FS, pharma, or utilities

Additional Information:
- Full landscape health review completed — prioritised remediation plan and 12-month roadmap produced
- HA/DR configuration validated with a completed, evidenced DR failover test
- One upgrade, SPS update, or cloud migration delivered with zero unplanned downtime
- At least one AI-assisted monitoring or automation capability live in production
- Trusted working relationships established with functional leads, security team, and IT management
- A 15 years full time education is required.