ES ORACLE Cloud Architect

HEXAWARE•United States,

3h•Onsite

About The Position

This is an L2 Production Support role focused on Identity and Access Management (IAM) for non-Oracle platforms and technologies. The consultant will provide support services for Identity Governance and Administration (IGA), including identity lifecycle management, access requests, provisioning/deprovisioning, access certifications, role and entitlement governance, segregation-of-duties controls, reporting, and remediation. The role also involves high-level operational support for provisioning and de-provisioning Oracle access through a designated IGA platform, processing approved access changes, and coordinating issue resolution. Specific technologies supported include Okta, Active Directory, Azure and Microsoft 365 (Entra ID), and CyberArk Privileged Access Management (PAM). The position requires performing related non-Oracle IAM activities such as access requirements analysis, secure solution design, configuration, testing, implementation, documentation, incident response, audit and compliance support, and stakeholder collaboration. Maintaining documentation for IAM configurations, role definitions, access policies, and operational procedures is crucial. The role emphasizes applying security principles like least-privilege, role-based access control, and segregation-of-duties. Troubleshooting identity, authentication, authorization, provisioning, and privileged access issues is a key responsibility. Oracle application security design, role design, configuration, and administration are explicitly out of scope, except for limited Oracle access provisioning/deprovisioning support.

Requirements

7-12 years of experience
Experience on a Maintenance & Support project
MS AD
Azure
Saviynt
Okta
CyberArk
Oracle Access provisioning/deprovisioning related knowledge

Responsibilities

Provide Identity and Access Management (IAM) support services for non-Oracle platforms and technologies.
Support identity lifecycle management, access requests and approvals, provisioning and de-provisioning, access certifications, role and entitlement governance, segregation-of-duties controls, reporting, and remediation activities.
Provide high-level operational support for provisioning and de-provisioning Oracle access through the designated IGA platform, including processing approved access changes and coordinating issue resolution.
Support single sign-on, multifactor authentication, application integrations, federation, authentication policies, user and group administration, troubleshooting, and related identity security controls for Okta.
Support user, group, and service account administration; group and access governance; authentication and directory-related troubleshooting; and associated security controls for Active Directory.
Support Microsoft Entra ID, Azure role-based access control, enterprise applications, application registrations, Conditional Access, privileged identity controls, Microsoft 365 identity and access administration, and related governance activities.
Support privileged account onboarding, safes, platforms, policies, credential management and rotation, session controls, access reviews, monitoring, reporting, and operational troubleshooting for CyberArk PAM.
Perform related non-Oracle IAM activities, including access requirements analysis, secure solution design, configuration, testing, implementation, documentation, incident response, audit and compliance support, and collaboration with business and IT stakeholders.
Maintain documentation for IAM configurations, role and entitlement definitions, access policies, operational procedures, and provisioning workflows.
Apply least-privilege, role-based access control, segregation-of-duties, and other applicable security requirements.
Support access reviews, security assessments, audit evidence requests, control testing, and remediation.
Troubleshoot identity, authentication, authorization, provisioning, and privileged access issues.
Assist with additional non-Oracle Identity and Access Management (IAM) tasks as assigned.