Sr. IAM Engineer – SAP Security HANA

McKesson’s Corporate; Cork; On-site; EUR 66,000 - 110,000; Full time

Job summary

McKesson is seeking a Senior SAP HANA Security Engineer to design, implement, and govern SAP security across S/4HANA, HANA, and ECC, with hands-on ownership of HANA privileges and access governance.

The role partners with Cybersecurity, IAM, Basis, and Audit teams to ensure SAP security aligns with enterprise risk, SOX/ITGC controls, and zero-trust architecture while driving secure, auditable solutions and continuous improvement.

Qualifications

• Strong expertise in SAP Security across SAP GRC, S/4HANA, HANA and ECC environments.
• Deep expertise in SAP HANA security, including privilege models and database-level access design.
• Hands-on experience with SAP GRC Access Control (ARA, ARM, EAM).
• Experience managing SoD risks and privileged access controls with business and compliance teams.
• SOX / ITGC controls and audit requirements experience.
• Ability to operate at Level 3-4 production support with incident ownership and RCA.
• Experience integrating SAP with IAM platforms (SailPoint preferred).
• Proven automation and process improvement track record.
• Strong communication of technical concepts to business, audit and engineering stakeholders.
• Minimum 8+ years in SAP Security; 4 full lifecycle deployments.

Responsibilities

• Design and implement SAP security architecture across SAP S/4HANA, HANA and ECC with focus on HANA security.
• Design, implement, and maintain HANA security controls including users, roles, and privileges.
• Configure HANA-level access controls for data access and reporting per regulatory/privacy requirements.
• Drive SAP access governance and GRC controls aligned with SOX/ITGC.
• Ensure encryption, key management, and secure storage for SAP data.
• Integrate SAP security with IAM (SailPoint) and SAP GRC capabilities.
• Enable threat visibility and security telemetry through monitoring and logging.
• Provide Level 3-4 production support, RCA, and incident response.
• Drive automation and standardization of security processes.
• Offer technical leadership and mentorship as a SAP HANA security SME.

Skills

SAP Security expertise

HANA security

SoD & GRC

Incident response

IAM integration (SailPoint)

Automation & improvement

Stakeholder communication

Production support L3-4

SOX/ITGC controls

Tools

SailPoint

SAP GRC Access Control

HANA Studio

Job description

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve - we care. What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow's health today, we want to hear from you.

Position Summary (Purpose of job)

The Senior SAP HANA Security Engineer (P4) is a senior technical subject matter expert responsible for the design, implementation, and governance of SAP security across SAP S/4HANA, HANA and ECC environments, and SAP GRC. This role serves as an expert engineer for SAP HANA database security, with hands-on ownership of HANA privilege design, access governance, and database-level control implementation while ensuring alignment with SAP application security, GRC, and compliance requirements. The role drives secure architecture decisions, resolves complex production and audit-related issues, and leads continuous improvement of SAP security capabilities. In close partnership with Cybersecurity, IAM, Basis, and Audit teams, the engineer ensures SAP security aligns with enterprise cyber architecture, Zero Trust principles, and risk management standards, including SAP GRC, SailPoint, and enterprise identity platforms. This role strengthens enterprise cyber resiliency by designing and embedding security controls that enable threat detection and response across SAP S/4HANA, HANA and ECC environments, while ensuring alignment with SOX compliance and SOC-driven monitoring expectations.

Key Responsibilities

• Lead the design and implementation of SAP security architecture across SAP S/4HANA, HANA and ECC environments, with a primary focus on SAP HANA database security, privilege design, and access governance.
• Design, implement, and maintain HANA database security controls, including users, roles, and privilege models (object, system, analytic, and package privileges), ensuring least-privilege access and protection of sensitive data.
• Configure and enforce HANA-level access controls for data access and reporting, including analytic privileges and data-level restrictions aligned to regulatory and privacy requirements.
• Drive SAP access governance and GRC controls, including Segregation of Duties (SoD) and audit-ready control design aligned with SOX / ITGC requirements.
• Ensure HANA database security includes encryption, key management, and secure storage practices aligned with enterprise data protection standards.
• Integrate SAP security with enterprise IAM platforms (SailPoint) and SAP GRC capabilities to support consistent access governance and risk management.
• Enable threat visibility and security telemetry integration across SAP systems through monitoring, logging, and detection capabilities.
• Provide Level 3-4 production support, leading incident response, restoring service, performing root cause analysis (RCA), and driving long-term improvements.
• Design SAP security solutions that enhance platform resilience, ensuring alignment with enterprise cyber resiliency objectives.
• Drive continuous improvement through automation, process optimization, and control standardization.
• Provide technical leadership and mentorship as an SME in SAP HANA security.

Required Skills

• Strong expertise in SAP Security across SAP GRC, S/4HANA, HANA and ECC environments.
• Deep expertise in SAP HANA security, including database roles, privilege models, user administration, and database-level access control design.
• Hands-on experience designing and managing SAP GRC Access Control (ARA, ARM, EAM).
• Hands-on experience managing SoD risks and privileged access controls, including collaboration with business and compliance teams.
• Experience supporting SOX / ITGC controls and audit requirements.
• Ability to operate at Level 3-4 production support, including incident ownership and RCA.
• Strong analytical and problem-solving capabilities across SAP and HANA layers.
• Experience integrating SAP with IAM platforms (SailPoint preferred).
• Proven track record of automation and process improvement.
• Ability to communicate technical concepts clearly to business, audit, and engineering stakeholders.
• Minimum 8+ years of progressive experience in SAP Security.
• Minimum of 4 full lifecycle SAP Security deployments across SAP S/4HANA, HANA and ECC environments.
• Experience supporting SAP security across implementation, build, test, go-live, and post-production phases.
• Experience working in large enterprise or regulated environments, including SOX / ITGC controls.

Our Base Pay Range for this position €66,000 - €110,000

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve - we care. What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow's health today, we want to hear from you.