ES ORACLE Cloud Architect

Role: L2 Production Support

Location – Perrysburg, OH 43551 (Completely Onsite)

Note: This is an L2 Support role, and we would expect around 7- 12 years of experience for the Consultant, preferably on the Maintenance & Support project.

Primary: MS AD, Azure, Saviynt, Okta and CyberArk

Secondary: Oracle Access provisioning/deprovisioning related knowledge

Job Description:

• Provide Identity and Access Management (IAM) support services for non-Oracle platforms and technologies, including but not limited to:

• Identity Governance and Administration (IGA): Support identity lifecycle management, access requests and approvals, provisioning and de-provisioning, access certifications, role and entitlement governance, segregation-of-duties controls, reporting, and remediation activities.

• Oracle Access Provisioning and De-provisioning: Provide high-level operational support for provisioning and de-provisioning Oracle access through the designated IGA platform, including processing approved access changes and coordinating issue resolution. Oracle application security design, role design, configuration, and administration remain out of scope.

• Okta: Support single sign-on, multifactor authentication, application integrations, federation, authentication policies, user and group administration, troubleshooting, and related identity security controls.

• Active Directory: Support user, group, and service account administration; group and access governance; authentication and directory-related troubleshooting; and associated security controls.

• Azure and Microsoft 365: Support Microsoft Entra ID, Azure role-based access control, enterprise applications, application registrations, Conditional Access, privileged identity controls, Microsoft 365 identity and access administration, and related governance activities.

• CyberArk Privileged Access Management (PAM): Support privileged account onboarding, safes, platforms, policies, credential management and rotation, session controls, access reviews, monitoring, reporting, and operational troubleshooting.

• Perform related non-Oracle IAM activities, including access requirements analysis, secure solution design, configuration, testing, implementation, documentation, incident response, audit and compliance support, and collaboration with business and IT stakeholders.

• Maintain documentation for IAM configurations, role and entitlement definitions, access policies, operational procedures, and provisioning workflows.

• Apply least-privilege, role-based access control, segregation-of-duties, and other applicable security requirements.

• Support access reviews, security assessments, audit evidence requests, control testing, and remediation.

• Troubleshoot identity, authentication, authorization, provisioning, and privileged access issues.

• Assist with additional non-Oracle Identity and Access Management (IAM) tasks as assigned. Except for the limited Oracle access provisioning and de-provisioning support expressly included above, Oracle applications, platforms, integrations, security configurations, role design, and administration are excluded from this SOW.