Oracle Identity & Access Management Engineer

General Dynamics Information Technology•USA MD Home Office (MDHOME), MD

18h•$118,320 - $160,080•Remote

About The Position

GDIT is seeking an Oracle Identity & Access Management Engineer to support Hosting, Operations and Maintenance (HOM) services for the Centers for Medicare & Medicaid Services (CMS) Healthcare Integrated General Ledger Accounting System (HIGLAS) program. The role provides functional administration and maintenance of Oracle Identity Management 12c applications, including Oracle Access Manager (OAM), Oracle Internet Directory (OID), and Oracle Identity Governance (OIG). It also supports identity and access management operations, continuous monitoring, access provisioning, authentication, and troubleshooting in production and non-production environments. The engineer develops and maintains system documentation, including standard operating procedures and configuration guides, and works with technical subject matter experts to ensure security controls operate as expected. The position emphasizes security-oriented practices, including secure coding, and requires strong technical expertise in Oracle IAM products, Java development, integrations, identity protocols, SQL, LDAP, and reporting. This is a remote role supporting a 40-hour work week, with travel required less than 10%. The position requires the ability to pass a CMS background check and meet the residency requirement of having lived in the United States for at least three of the previous five years. The likely salary range is $118,320–$160,080, with compensation dependent on experience, geographic location, and contractual requirements.

Requirements

At least 5 years of experience in the Identity & Access Management domain.
Expertise implementing, maintaining, and migrating OIG and OAM 12c components, including WebLogic, OIM, SOA, BI, OAM, OAA, and OARM, as well as OID 12c.
Strong Java coding skills and proficiency with OIG/OAM REST and Java APIs for custom development, scheduled job deployments, and automations.
Thorough understanding of authentication and authorization mechanisms, including SSO, identity federation, MFA, entitlements, SAML, and OAuth.
Extensive experience designing and implementing SSO integrations using OAM or other identity tools, with out-of-the-box and custom options.
Strong knowledge of IAM, RBAC and ABAC, segregation of duties, least privilege, and privilege escalation.
Hands-on development experience with scheduled jobs, adapters, event handlers, notifications, plugins, custom connectors (ICF/CI), and custom web pages.
Ability to troubleshoot, identify, and resolve OIG/OAM issues in production and non-production environments.
Strong understanding of SQL and ability to write custom queries, create reports, and resolve issues with existing SQL objects.
Experience creating, updating, migrating, and maintaining BI Publisher reports.
Ability to manage multiple deliverables simultaneously and track items to completion without constant reminders.
Experience with LDAP directories such as OID and AD, LDAP queries, and troubleshooting directory data or other issues.
Strong analytical, written, and verbal communication skills, including comfort conducting presentations for existing customer audiences.
Ability to pass the CMS background check and meet the requirement of having resided in the United States for at least three of the last five years.

Nice To Haves

Upgrade experience from FMW 12c to 14c.
Knowledge of WebAuthn/FIDO2, device-level signaling, and other relevant Zero Trust identity functions.
Relevant IAM certifications, such as CIAM or CIGE.
Hands-on implementation experience with OAM 12c, including WebGate configuration/deployment and SAML, OIDC, and OAuth protocols.
Experience addressing audit requirements related to certifications, user operations, access grants, and request approvals.
Knowledge of Splunk and ability to independently investigate logs for relevant issues.
CISSP, CISA, CISM, CompTIA Security+, or technology-specific certifications.

Responsibilities

Administer and maintain Oracle Identity Management 12c applications, including OAM, OID, and OIG.
Support IAM continuous monitoring, including monitoring identities, access and permission changes, privilege escalation, bot activity, and related activities.
Support user access provisioning, authentication, and access management processes.
Participate in troubleshooting OIG/OAM issues in production and non-production environments.
Develop and maintain system documentation, including standard operating procedures and configuration guides.
Apply security-oriented practices, including secure coding practices, to avoid creating vulnerabilities.
Coordinate and collaborate with technical subject matter experts to ensure technical and operational security controls operate as expected.
Implement, maintain, and migrate Oracle IAM components and develop custom solutions, automations, scheduled jobs, and web pages.
Create, update, migrate, and maintain BI Publisher reports.
Manage multiple deliverables, track work through completion, and communicate technical information, including presentations to customer audiences.

Benefits

401(k) with company match.
Medical plan options, including some with Health Savings Accounts.
Dental insurance.
Vision plan.
Full-flex work weeks within core business hours, where possible.
Paid vacation, sick and personal time, and holidays.
Paid parental leave, including a paid family leave program of up to 160 hours in a rolling 12-month period for eligible employees.
Paid education and certifications.
Professional growth opportunities and internal career mobility support.
Short- and long-term disability benefits, life insurance, and other insurance offerings.
Remote work.