Sr. IAM Engineer – SAP Security HANA
Job Location:
Monthly Salary:
Posted:
Application Deadline:
Vacancies:
Job Summary
McKesson is an impact-driven Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights products and services that make quality care more accessible and affordable. Here we focus on the health happiness and well-being of you and those we serve we care.
What you do at McKesson matters. We foster a culture where you can grow make an impact and are empowered to bring new ideas. Together we thrive as we shape the future of health for patients our communities and our people. If you want to be part of tomorrows health today we want to hear from you.
Position Summary (Purpose of job):
The Senior SAP HANA Security Engineer (P4) is a senior technical subject matter expert responsible for the design implementation and governance of SAP security across SAP S/4HANA HANA and ECC environments and SAP GRC. This role serves as an expert engineer for SAP HANA database security with hands-on ownership of HANA privilege design access governance and database-level control implementation while ensuring alignment with SAP application security GRC and compliance requirements.
The role drives secure architecture decisions resolves complex production and audit-related issues and leads continuous improvement of SAP security close partnership with Cybersecurity IAM Basis and Audit teams the engineer ensures SAP security aligns with enterprise cyber architecture Zero Trust principles and risk management standards including SAP GRC SailPoint and enterprise identity platforms.
This role strengthens enterprise cyber resiliency by designing and embedding security controls that enable threat detection and response across SAP S/4HANA HANA and ECC environments while ensuring alignment with SOX compliance and SOC-driven monitoring expectations.
Key Responsibilities:
- Lead the design and implementation of SAP security architecture across SAP S/4HANA HANA and ECC environments with a primary focus on SAP HANA database security privilege design and access governance.
- Design implement and maintain HANA database security controls including users roles and privilege models (object system analytic and package privileges) ensuring least-privilege access and protection of sensitive data.
- Configure and enforce HANA-level access controls for data access and reporting including analytic privileges and data-level restrictions aligned to regulatory and privacy requirements.
- Drive SAP access governance and GRC controls including Segregation of Duties (SoD) and audit-ready control design aligned with SOX / ITGC requirements.
- Ensure HANA database security includes encryption key management and secure storage practices aligned with enterprise data protection standards.
- Integrate SAP security with enterprise IAM platforms (SailPoint) and SAP GRC capabilities to support consistent access governance and risk management.
- Enable threat visibility and security telemetry integration across SAP systems through monitoring logging and detection capabilities.
- Provide Level 34 production support leading incident response restoring service performing root cause analysis (RCA) and driving long-term improvements.
- Design SAP security solutions that enhance platform resilience ensuring alignment with enterprise cyber resiliency objectives.
- Drive continuous improvement through automation process optimization and control standardization.
- Provide technical leadership and mentorship as an SME in SAP HANA security.
Required Skills:
- Strong expertise in SAP Security across SAP GRC S/4HANA HANA and ECC environments.
- Deep expertise in SAP HANA security including database roles privilege models user administration and database-level access control design.
- Hands-on experience designing and managing SAP GRC Access Control (ARA ARM EAM).
- Hands-on experience managing SoD risks and privileged access controls including collaboration with business and compliance teams.
- Experience supporting SOX / ITGC controls and audit requirements.
- Ability to operate at Level 34 production support including incident ownership and RCA.
- Strong analytical and problem-solving capabilities across SAP and HANA layers.
- Experience integrating SAP with IAM platforms (SailPoint preferred).
- Proven track record of automation and process improvement.
- Ability to communicate technical concepts clearly to business audit and engineering stakeholders.
- Minimum 8 years of progressive experience in SAP Security.
- Minimum of 4 full lifecycle SAP Security deployments across SAP S/4HANA HANA and ECC environments.
- Experience supporting SAP security across implementation build test go-live and post-production phases.
- Experience working in large enterprise or regulated environments including SOX / ITGC controls.
At McKesson we care about the well-being of the patients and communities we serve and that starts with caring for our people. Thats why we have a Total Rewards package that includes comprehensive benefits to supportphysical mental and financial well-being. Our Total Rewards offerings serve the different needs of our diverse employee population and ensure they are the healthiest versions of themselves.
As part of Total Rewards we are proud to offer a competitive compensation package at McKesson. This is determined by several factors including performance experience and skills equity regular job market evaluations and geographical markets. The pay range shown below is aligned with McKessons pay philosophy and pay will always be compliant with any applicable regulations. In addition to base pay other compensation such as an annual bonus or long-term incentive opportunities may be offered.
Our Base Pay Range for this position
66000 - 110000McKesson has become aware of online recruiting-related scams in which individuals who are not affiliated with or authorized by McKesson are using McKessons (or affiliated entities like CoverMyMeds or RxCrossroads) name in fraudulent emails job postings or social media light of these scams please bear the following in mind:
McKesson Talent Advisors will never solicit money or credit card information in connection with a McKesson job application.
McKesson Talent Advisors do not communicate with candidates via online chatrooms or using email accounts such as Gmail or Hotmail. Note that McKesson does rely on a virtual assistant (Gia) for certain recruiting-related communications with candidates.
McKesson job postings are posted on our career site: .
Required Experience:
Senior IC
About Company
McKesson is the leading healthcare company for wholesale medical supplies & equipment, pharmaceutical distribution, and healthcare technology solutions. McKesson is the central nervous system of health care. At any given moment, in any given minute, we simultaneously execute thousands ... View more
