Oracle EBS & OCI Security Consultant

Job Tile - Oracle EBS & OCI Security Consultant

Location - Washington DC 20005

Hybrid: 2-3 Days Onsite

Duration - 6+ Months 

Note - This is a W-2 position, and we welcome candidates requiring H-1B transfer sponsorship to apply. No third-party vendors.

The OCI & Oracle EBS Security Specialist is responsible for implementing, administering, monitoring, and supporting security controls across Oracle E-Business Suite R12/R12.2 and Oracle Cloud Infrastructure (OCI). The specialist will manage user access, IAM, roles, authentication, authorization, database security, cloud security, integrations, and compliance controls

Key Responsibilities:

1. Oracle EBS Security

• Administer Oracle EBS R12/R12.2 user accounts and responsibilities.
• Create and maintain: Responsibilities, Menus, Functions, Request Groups, Security Profiles, Data Access
• Implement role-based access control (RBAC) and least-privilege access.
• Perform EBS user access reviews and responsibility reviews.
• Support segregation-of-duties (SoD) requirements.
• Troubleshoot EBS authentication and authorization issues.
• Review custom responsibilities and custom application security.
• Support EBS security during patching, cloning, upgrades, and migrations

2. OCI IAM

• Administer OCI Identity and Access Management (IAM).
• Create and manage: Users, Groups, Policies, Compartments, Dynamic Groups, Federation
• Apply least-privilege OCI policies.
• Review and remediate excessive OCI privileges.
• Manage service identities and service accounts.
• Support OCI SSO and federation with enterprise identity providers. 

3. Identity & Access Management

• Integrate OCI and EBS with Active Directory / LDAP / Microsoft Entra ID.
• Support SSO using SAML/OIDC where applicable.
• Implement MFA.
• Manage user provisioning and de-provisioning.
• Perform periodic access certification.
• Support privileged-access management processes.
• Troubleshoot authentication and authorization issues

4. OCI Cloud Security

• Support OCI security configuration and hardening.
• Work with: OCI Cloud Guard, OCI Vault, OCI Logging, OCI Monitoring, Security
• Zones, Vulnerability Scanning
• Monitor security findings and coordinate remediation.
• Manage secrets, credentials, certificates, and encryption keys through OCI Vault.
• Review OCI security posture and configuration.

5. OCI Network Security

• Support secure OCI network configuration.
• Work with: VCNs, Subnets, Route Tables, Security Lists, Network Security Groups, Load Balancers, WAF, VPN, FastConnect
• Ensure EBS-to-OCI connectivity follows security standards.
• Troubleshoot connectivity and firewall/security-rule issues.

6. Oracle Database Security

• Manage Oracle database security supporting EBS.
• Create and maintain database users, roles, and privileges.
• Review database access.
• Support database auditing.
• Implement encryption and secure connections.
• Review EBS application database accounts and integration accounts.
• Support database security assessments and remediation.

7. EBS / OCI Integration Security

• Secure EBS integrations with OCI services.
• Support security for OIC, REST/SOAP APIs, API Gateway, Object Storage, and OCI databases.
• Secure service accounts and credentials.
• Implement TLS/SSL and certificate-based authentication where required.
• Ensure credentials are not hard coded in applications or integration configurations.

• Monitor security logs and access activities.
• Investigate security incidents related to EBS and OCI.
• Support vulnerability remediation.
• Participate in security audits.
• Maintain security documentation and evidence.
• Support compliance frameworks such as: NIST, FISMA, FedRAMP, SOX, SOC 2
• Maintain security control documentation and access matrices.

Experience:

• 7–10+ years of Oracle EBS experience.
• 3–5+ years of OCI security/IAM experience.
• Hands-on experience administering EBS security.
• Experience with OCI IAM and cloud security controls.
• Experience integrating Oracle applications with enterprise IAM/SSO.
• Experience with Oracle Database security.
• Experience supporting large enterprise or government environments is preferred.
• Strong troubleshooting and documentation skills.