OCI & Oracle EBS Security Specialist (EBS 12.2.12)

Ampcus Inc.•Washington, DC

About The Position

Ampcus Inc. is seeking a highly motivated OCI & Oracle EBS Security Specialist to implement, administer, monitor, and support security controls across Oracle E-Business Suite R12/R12.2 and Oracle Cloud Infrastructure (OCI). This role involves managing user access, IAM, roles, authentication, authorization, database security, cloud security, integrations, and compliance controls within a large enterprise or government environment.

Requirements

7–10 years of Oracle EBS experience.
3–5 years of OCI security/IAM experience.
Hands-on experience administering EBS security.
Experience with OCI IAM and cloud security controls.
Experience integrating Oracle applications with enterprise IAM/SSO.
Experience with Oracle Database security.
Strong troubleshooting skills.
Strong documentation skills.

Nice To Haves

Experience supporting large enterprise or government environments is preferred.

Responsibilities

Administer Oracle EBS R12/R12.2 user accounts and responsibilities, including creating and maintaining Responsibilities, Menus, Functions, Request Groups, Security Profiles, and Data Access.
Implement role-based access control (RBAC) and least-privilege access within EBS.
Perform EBS user access reviews and responsibility reviews, and support segregation-of-duties (SoD) requirements.
Troubleshoot EBS authentication and authorization issues, and review custom responsibilities and custom application security.
Support EBS security during patching, cloning, upgrades, and migrations.
Administer OCI Identity and Access Management (IAM), including creating and managing Users, Groups, Policies, Compartments, Dynamic Groups, and Federation.
Apply least-privilege OCI policies and review/remediate excessive OCI privileges.
Manage OCI service identities and service accounts, and support OCI SSO and federation with enterprise identity providers.
Integrate OCI and EBS with Active Directory / LDAP / Microsoft Entra ID, and support SSO using SAML/OIDC.
Implement Multi-Factor Authentication (MFA) and manage user provisioning and de-provisioning.
Perform periodic access certification and support privileged-access management processes.
Troubleshoot authentication and authorization issues across OCI and EBS.
Support OCI security configuration and hardening, working with OCI Cloud Guard, OCI Vault, OCI Logging, OCI Monitoring, Security Zones, and Vulnerability Scanning.
Monitor security findings in OCI and coordinate remediation efforts.
Manage secrets, credentials, certificates, and encryption keys through OCI Vault.
Review OCI security posture and configuration.
Support secure OCI network configuration, working with VCNs, Subnets, Route Tables, Security Lists, Network Security Groups, Load Balancers, WAF, VPN, and FastConnect.
Ensure EBS-to-OCI connectivity follows security standards and troubleshoot connectivity/firewall issues.
Manage Oracle database security supporting EBS, including creating and maintaining database users, roles, and privileges.
Review database access, support database auditing, and implement encryption and secure connections.
Review EBS application database accounts and integration accounts, and support database security assessments.
Secure EBS integrations with OCI services, supporting security for OIC, REST/SOAP APIs, API Gateway, Object Storage, and OCI databases.
Secure service accounts and credentials, implement TLS/SSL and certificate-based authentication, and ensure credentials are not hard coded.
Monitor security logs and access activities, investigate security incidents related to EBS and OCI, and support vulnerability remediation.
Participate in security audits and maintain security documentation and evidence.
Support compliance frameworks such as NIST, FISMA, FedRAMP, SOX, SOC 2, and maintain security control documentation and access matrices.