Oracle Fusion Application Security Specialist

The Application Security Specialist is responsible for designing, implementing, and managing comprehensive security practices and access control frameworks for Oracle Applications Cloud (HCM, ERP, EPM, etc.). The Security Specialist will ensure the development and enforcement of role-based access controls (RBAC), and segregation of duties (SoD) to ensure regulatory compliance and mitigation of security risks. The specialist will collaborate closely with functional teams to translate business requirements into secure, auditable access models while maintaining full observability of user activity and resource usage. This position is instrumental in implementing secure identity and access management (IAM) solutions, including SSO, MFA, directory integration, and automated provisioning & deprovisioning processes.

Essential Duties

A) Oracle Fusion Application Security Administration:

• Administer user roles and permissions within Oracle applications cloud (HCM, Financials, EPM, etc.).
• Administer the Oracle Security Console to create and manage custom security roles.
• Perform day-to-day security operations & role management.
• Create, configure and maintain users, provision and de-provision users, create and manage roles.
• Monitor and maintain onboarding/offboarding processes.
• Troubleshoot user access issues.
• Regularly review and audit access logs and user activities for anomalies or violations.
• Develop and maintain documentation of security configurations, roles, policies, and procedures.
• Stay current on security trends, advancements, and technology solutions.

B) Oracle Fusion Application Security Analysis:

• Create and maintain security roles catalog for Oracle Fusion applications.
• Create and maintain segregation of duties (SoD) matrix for Oracle Fusion applications.
• Design and configure security roles, duty roles, abstract roles and data access sets based on business needs and best practices.
• Conduct regular reviews of user access rights and application roles to enforce the principle of least privilege.
• Ensure compliance with internal controls, audit requirements, and segregation of duties (SoD) policies.
• Create security and audit reporting using OTBI, Oracle BIP and other reporting tools.
• Support internal and external audits.
• Ensure compliance with standards such as FERPA, HIPAA, etc.