OCI & Oracle EBS Security Specialist

This is a contract position for an OCI & Oracle EBS Security Specialist based in Washington, Washington. The role is available for a term of 6+ months.

Responsibilities

• Administer Oracle EBS R12/R12.2 user accounts, responsibilities, menus, functions, request groups, security profiles, and data access controls.
• Implement and maintain role-based access control (RBAC) and least-privilege access across EBS environments.
• Perform EBS user access reviews, responsibility reviews, and support segregation-of-duties (SoD) requirements.
• Troubleshoot EBS authentication and authorization issues and review custom responsibilities and custom application security.
• Support EBS security during patching, cloning, upgrades, and migrations.
• Administer OCI Identity and Access Management (IAM), including users, groups, policies, compartments, dynamic groups, and federation.
• Apply and maintain least-privilege OCI policies and review and remediate excessive OCI privileges.
• Manage service identities and service accounts within OCI.
• Support OCI SSO and federation with enterprise identity providers.
• Integrate OCI and EBS with Active Directory, LDAP, and Microsoft Entra ID.
• Support SSO using SAML and OIDC where applicable.
• Implement multi-factor authentication (MFA).
• Manage user provisioning, de-provisioning, and periodic access certification.
• Support privileged-access management processes and troubleshoot authentication and authorization issues.
• Support OCI security configuration and hardening using OCI Cloud Guard, OCI Vault, OCI Logging, OCI Monitoring, Security Zones, and Vulnerability Scanning.
• Monitor security findings and coordinate remediation efforts.
• Manage secrets, credentials, certificates, and encryption keys through OCI Vault.
• Review OCI security posture and configuration.
• Support secure OCI network configuration including VCNs, subnets, route tables, security lists, network security groups, load balancers, WAF, VPN, and FastConnect.
• Ensure EBS-to-OCI connectivity follows security standards.
• Troubleshoot connectivity and firewall/security-rule issues.
• Manage Oracle database security supporting EBS, including database users, roles, and privileges.
• Review database access and support database auditing.
• Implement encryption and secure connections for Oracle databases.
• Review EBS application database accounts and integration accounts.
• Support database security assessments and remediation.
• Secure EBS integrations with OCI services including OIC, REST/SOAP APIs, API Gateway, Object Storage, and OCI databases.
• Secure service accounts and credentials and implement TLS/SSL and certificate-based authentication where required.
• Ensure credentials are not hard-coded in applications or integration configurations.
• Monitor security logs and access activities and investigate security incidents related to EBS and OCI.
• Support vulnerability remediation and participate in security audits.
• Maintain security documentation, evidence, and access matrices.
• Support compliance frameworks including NIST, FISMA, FedRAMP, SOX, and SOC 2.

Qualifications

• Required
• 7-10+ years of Oracle EBS experience.
• 3-5+ years of OCI security and/or IAM experience.
• Hands-on experience administering EBS security.
• Experience with OCI IAM and cloud security controls.
• Experience integrating Oracle applications with enterprise IAM and SSO.
• Experience with Oracle Database security.
• Strong troubleshooting and documentation skills.