Oracle Identity & Access Management Engineer

GDIT is seeking an Oracle Identity & Access Management Engineer supporting Hosting, Operations and Maintenance (HOM) services for the Centers for Medicare & Medicaid Services (CMS) Healthcare Integrated General Ledger Accounting System (HIGLAS) program.

Key Responsibilities:

• Functional administration and maintenance of 12c Oracle Identity Management application including Oracle Access Manager (OAM), Oracle Internet Directory (OID), and Oracle Identity Governance (OIG)
• Provide support to and participate in IAM continuous monitoring activities including monitoring new and removed identities, access and permissions changes, privilege escalation, bot activity, and other related activities
• Support user access provisioning, authentication, and access management processes
• Actively participate in troubleshooting sessions for OIG/OAM in Prod and Non-Prod
• Develop and maintain system documentation, including standard operating procedures (SOPs) and configuration guides
• Having a strong affinity toward security-oriented practices – including coding, to avoid creating vulnerabilities
• Coordinate and collaborate with technical subject matter experts (SMEs) to ensure technical and operational security controls are operating as expected

Requirements:

• 5+ years’ experience in the Identity & Access Management domain
• Expertise in implementing, maintaining, and migrating OIG, OAM 12c components (WebLogic, OIM, SOA, BI, OAM, OAA, OARM), and OID 12c
• Strong Java coding skills with proficiency in OIG/OAM APIs (REST and Java APIs) for custom development of webpages, scheduled job deployments, automations
• Thorough understanding of authentication and authorization mechanisms, including Single Sign-On (SSO), Identity Federation, Multi-Factor Authentication (MFA), Entitlements, Security Assertion Markup Language (SAML), Open Authorization (OAuth), etc.
• Extensive exposure to SSO integrations – designing and implementing SSO solutions using OOTB and custom options with OAM or other Identity tools
• Strong knowledge of identity and access management, role- and attribute-based access controls (RBAC/ABAC), segregation of duties, least privilege, privilege escalation, etc.
• Hands on development experience with Scheduled jobs, Adapters, Event handlers, Notifications, plugins and custom connectors (ICF/CI), web pages (for custom page development)
• Ability to troubleshoot, identify and resolve issues related to OIG/OAM in Prod, non-prod environments
• Strong understanding of SQL queries – ability to write custom queries to support custom functionalities, create reports, resolve any issues with existing SQL objects
• Experience with BI Publisher reports creation/updates/migration/maintenance
• Ability to manage multiple deliverables simultaneously, without impacting deadlines
• Experience with LDAP directories (like OID, AD, etc.) and LDAP queries, and an ability to troubleshoot & resolve any issues (data or otherwise)

Benefits:

• Full-flex work week within core business hours
• 401K with company match
• Comprehensive health and wellness packages
• Internal mobility team dedicated to helping you own your career
• Professional growth opportunities including paid education and certifications
• Cutting-edge technology you can learn from
• Rest and recharge with paid vacation and holidays
• Challenging work that makes a real impact on the world around you
• Remote work