OCI & Oracle EBS Security Specialist

The OCI & Oracle EBS Security Specialist is responsible for implementing, administering, monitoring, and supporting security controls across Oracle E-Business Suite R12/R12.2 and Oracle Cloud Infrastructure (OCI). The specialist will manage user access, IAM, roles, authentication, authorization, database security, cloud security, integrations, and compliance controls.

Key Responsibilities:

• Oracle EBS Security
  • Administer Oracle EBS R12/R12.2 user accounts and responsibilities.
  • Create and maintain: Responsibilities, Menus, Functions, Request Groups, Security Profiles, Data Access
  • Implement role-based access control (RBAC) and least-privilege access.
  • Perform EBS user access reviews and responsibility reviews.
  • Support segregation-of-duties (SoD) requirements.
  • Troubleshoot EBS authentication and authorization issues.
  • Review custom responsibilities and custom application security.
  • Support EBS security during patching, cloning, upgrades, and migrations.
• OCI IAM
  • Administer OCI Identity and Access Management (IAM).
  • Create and manage: Users, Groups, Policies, Compartments, Dynamic Groups, Federation
  • Apply least-privilege OCI policies.
  • Review and remediate excessive OCI privileges.
  • Manage service identities and service accounts.
  • Support OCI SSO and federation with enterprise identity providers.
• Identity & Access Management
  • Integrate OCI and EBS with Active Directory / LDAP / Microsoft Entra ID.
  • Support SSO using SAML/OIDC where applicable.
  • Implement MFA.
  • Manage user provisioning and de-provisioning.
  • Perform periodic access certification.
  • Support privileged-access management processes.
  • Troubleshoot authentication and authorization issues.
• OCI Cloud Security
  • Support OCI security configuration and hardening.
  • Work with: OCI Cloud Guard, OCI Vault, OCI Logging, OCI Monitoring, Security Zones, Vulnerability Scanning
  • Monitor security findings and coordinate remediation.
  • Manage secrets, credentials, certificates, and encryption keys through OCI Vault.
  • Review OCI security posture and configuration.
• OCI Network Security
  • Support secure OCI network configuration.
  • Work with: VCNs, Subnets, Route Tables, Security Lists, Network Security Groups, Load Balancers, WAF, VPN, FastConnect
  • Ensure EBS-to-OCI connectivity follows security standards.
  • Troubleshoot connectivity and firewall/security-rule issues.
• Oracle Database Security
  • Manage Oracle database security supporting EBS.
  • Create and maintain database users, roles, and privileges.
  • Review database access.
  • Support database auditing.
  • Implement encryption and secure connections.
  • Review EBS application database accounts and integration accounts.
  • Support database security assessments and remediation.
• EBS / OCI Integration Security
  • Secure EBS integrations with OCI services.
  • Support security for OIC, REST/SOAP APIs, API Gateway, Object Storage, and OCI databases.
  • Secure service accounts and credentials.
  • Implement TLS/SSL and certificate-based authentication where required.
  • Ensure credentials are not hard coded in applications or integration configurations.
  • Security Monitoring & Compliance
  • Monitor security logs and access activities.
  • Investigate security incidents related to EBS and OCI.
  • Support vulnerability remediation.
  • Participate in security audits.
  • Maintain security documentation and evidence.
  • Support compliance frameworks such as: NIST, FISMA, FedRAMP, SOX, SOC 2
  • Maintain security control documentation and access matrices.

• 7–10+ years of Oracle EBS experience.
• 3–5+ years of OCI security/IAM experience.
• Hands-on experience administering EBS security.
• Experience with OCI IAM and cloud security controls.
• Experience integrating Oracle applications with enterprise IAM/SSO.
• Experience with Oracle Database security.
• Experience supporting large enterprise or government environments is preferred.
• Strong troubleshooting and documentation skills.