What are the responsibilities and job description for the OCI & Oracle EBS Security Specialist position at TechWish?
Job Description:
The OCI & Oracle EBS Security Specialist is responsible for implementing, administering, monitoring, and supporting security controls across Oracle E-Business Suite R12/R12.2 and Oracle Cloud Infrastructure (OCI). The specialist will manage user access, IAM, roles, authentication, authorization, database security, cloud security, integrations, and compliance controls.
Key Responsibilities:
Oracle EBS Security
o Administer Oracle EBS R12/R12.2 user accounts and responsibilities.
o Create and maintain: Responsibilities, Menus, Functions, Request Groups, Security Profiles, Data Access
o Implement role-based access control (RBAC) and least-privilege access.
o Perform EBS user access reviews and responsibility reviews.
o Support segregation-of-duties (SoD) requirements.
o Troubleshoot EBS authentication and authorization issues.
o Review custom responsibilities and custom application security.
o Support EBS security during patching, cloning, upgrades, and migrations.
OCI IAM
o Administer OCI Identity and Access Management (IAM).
o Create and manage: Users, Groups, Policies, Compartments, Dynamic Groups, Federation
o Apply least-privilege OCI policies.
o Review and remediate excessive OCI privileges.
o Manage service identities and service accounts.
o Support OCI SSO and federation with enterprise identity providers.
Identity & Access Management
o Integrate OCI and EBS with Active Directory / LDAP / Microsoft Entra ID.
o Support SSO using SAML/OIDC where applicable.
o Implement MFA.
o Manage user provisioning and de-provisioning.
o Perform periodic access certification.
o Support privileged-access management processes.
o Troubleshoot authentication and authorization issues.
OCI Cloud Security
o Support OCI security configuration and hardening.
o Work with: OCI Cloud Guard, OCI Vault, OCI Logging, OCI Monitoring, Security Zones, Vulnerability Scanning
o Monitor security findings and coordinate remediation.
o Manage secrets, credentials, certificates, and encryption keys through OCI Vault.
o Review OCI security posture and configuration.
OCI Network Security
o Support secure OCI network configuration.
o Work with: VCNs, Subnets, Route Tables, Security Lists, Network Security Groups, Load Balancers, WAF, VPN, FastConnect
o Ensure EBS-to-OCI connectivity follows security standards.
o Troubleshoot connectivity and firewall/security-rule issues.
Oracle Database Security
o Manage Oracle database security supporting EBS.
o Create and maintain database users, roles, and privileges.
o Review database access.
o Support database auditing.
o Implement encryption and secure connections.
o Review EBS application database accounts and integration accounts.
o Support database security assessments and remediation.
EBS / OCI Integration Security
o Secure EBS integrations with OCI services.
o Support security for OIC, REST/SOAP APIs, API Gateway, Object Storage, and OCI databases.
o Secure service accounts and credentials.
o Implement TLS/SSL and certificate-based authentication where required.
o Ensure credentials are not hard coded in applications or integration configurations.
o Security Monitoring & Compliance
o Monitor security logs and access activities.
o Investigate security incidents related to EBS and OCI.
o Support vulnerability remediation.
o Participate in security audits.
o Maintain security documentation and evidence.
o Support compliance frameworks such as: NIST, FISMA, FedRAMP, SOX, SOC 2
o Maintain security control documentation and access matrices.
Required Experience:
- 7 10 years of Oracle EBS experience.
- 3 5 years of OCI security/IAM experience.
- Hands-on experience administering EBS security.
- Experience with OCI IAM and cloud security controls.
- Experience integrating Oracle applications with enterprise IAM/SSO.
- Experience with Oracle Database security.
- Experience supporting large enterprise or government environments is preferred.
- Strong troubleshooting and documentation skills.