ES ORACLE Cloud Architect

Role: L2 Production Support

Location - Perrysburg, OH 43551 (Completely Onsite)

Note: This is an L2 Support role, and we would expect around 7- 12 years of experience for the Consultant, preferably on the Maintenance & Support project.

Primary: MS AD, Azure, Saviynt, Okta and CyberArk

Secondary: Oracle Access provisioning/deprovisioning related knowledge

Job Description:

• Provide Identity and Access Management (IAM) support services for non-Oracle platforms and technologies, including but not limited to:
• Identity Governance and Administration (IGA): Support identity lifecycle management, access requests and approvals, provisioning and de-provisioning, access certifications, role and entitlement governance, segregation-of-duties controls, reporting, and remediation activities.
• Oracle Access Provisioning and De-provisioning: Provide high-level operational support for provisioning and de-provisioning Oracle access through the designated IGA platform, including processing approved access changes and coordinating issue resolution. Oracle application security design, role design, configuration, and administration remain out of scope.
• Okta: Support single sign-on, multifactor authentication, application integrations, federation, authentication policies, user and group administration, troubleshooting, and related identity security controls.
• Active Directory: Support user, group, and service account administration; group and access governance; authentication and directory-related troubleshooting; and associated security controls.
• Azure and Microsoft 365: Support Microsoft Entra ID, Azure role-based access control, enterprise applications, application registrations, Conditional Access, privileged identity controls, Microsoft 365 identity and access administration, and related governance activities.
• CyberArk Privileged Access Management (PAM): Support privileged account onboarding, safes, platforms, policies, credential management and rotation, session controls, access reviews, monitoring, reporting, and operational troubleshooting.
• Perform related non-Oracle IAM activities, including access requirements analysis, secure solution design, configuration, testing, implementation, documentation, incident response, audit and compliance support, and collaboration with business and IT stakeholders.
• Maintain documentation for IAM configurations, role and entitlement definitions, access policies, operational procedures, and provisioning workflows.
• Apply least-privilege, role-based access control, segregation-of-duties, and other applicable security requirements.
• Support access reviews, security assessments, audit evidence requests, control testing, and remediation.
• Troubleshoot identity, authentication, authorization, provisioning, and privileged access issues.
• Assist with additional non-Oracle Identity and Access Management (IAM) tasks as assigned. Except for the limited Oracle access provisioning and de-provisioning support expressly included above, Oracle applications, platforms, integrations, security configurations, role design, and administration are excluded from this SOW.