OAM Architect

GovServicesHub • New York, New York, United States • 1w ago

Job Location: New York, NY 10014, 100% On-Site

Job Description:

CUNY requires a OAM consultant to provide ongoing support and maintenance to integrate/migrate colleges’ applications with CUNY Login SSO.

Duties

Configure and customize SSO solution in high availability mode using Oracle Access Management to implement various features such as Federation/SAML, OAuth, Open ID Connect, Multi-Factor Authentication besides current solution setup only for Header Based application integrations.
Work in the following 12c PS4 version tools - Oracle Access Management, Oracle HTTP Server, Oracle Advanced Authentication (OAA), Oracle Adaptive Risk Management (OARM) OR Oracle Adaptive Access Management and Oracle RADIUS Agent in a large, complicated environment with services in High Availability (MDC). Good understanding of IT Security concepts including Identity and Access Management domain such as Identity Life Cycle Management and Single Sign On.
Solution to deploy and run 12c microservices releases in Access Management such Advanced Authentication in containers.
Maintain the OAM/SSO environments with regular patching.
Developing custom pages for login and MFA, authentication plug-in, SAML profiles, etc.
Work with vendors and application owners (At colleges) to define the requirements for each application for SSO integrations using OAM Federation Services such as SAML, OIDC and OAuth2.
Setup and configure applications in the test environments.
Configure Oracle Unified Directory - Directory Server and Proxy Server. Extend the directory schema and create virtual attributes as per the use cases.
Document each application integration including the issues resolved during the integration.
Work with vendors and application owners to confirm applications are functioning as expected.
Document all details and tasks involved with various integrations, developing solutions in OAM.
Work closely with application teams on integrating various flavors of applications for SSO.
Configure to leverage API usage in all Oracle IAM components for various use cases.
Configure to leverage API usage in all Oracle IAM components including Oracle Microservices - Oracle Advanced Authentication (OAA) and Oracle Adaptive Risk Management (OARM) for various use cases.
Debug internal and external integration issues not limited to the products but OS related, Load balancers, Firewalls, App Servers, etc., and collaborate with external teams such as Oracle Support. Networking Systems, DBA and Application Teams to resolve issues.
Create or modify existing BI Publisher reports.
Work closely with other teams to identify and solve issues.
Other duties as assigned.

Mandatory Requirements:

Experience (14+ Years)
Defines the architecture of a computerized system (i.e., a system composed of software and hardware) in order to fulfill certain requirement, including a breakdown of the system into components, the component interactions and interfaces (including with the environment, especially the user), and the technologies and resources to be used in the design.
This is an 100% Onsite
84 months experience in the following 12c PS4 version tools - Oracle Access Manager, Oracle HTTP Server, Oracle Advanced Authentication (OAA), Oracle Adaptive Risk Management (OARM) OR Oracle Adaptive Access Management and Oracle RADIUS Agent in a large, complicated environment with services in High Availability (MDC). IT Security concepts include Identity and Access Management domain such as Identity Life Cycle Management and Single Sign On.
84 months experience debugging internal and external integration issues not limited to the products but OS related, Load balancers, Firewalls, App Servers, etc., and collaborate with external teams such as Oracle Support, Networking, Systems, DBA and Application Teams to resolve.
84 months experience in OAM Suite SSO products, including customizing OAM Features such as Header Based, SAML/Federation, OAuth, OpenID Connect, MFA, Advanced Authentication, etc., as per application use cases in high availability setup; OAAM and/or 12c OAA/OARM Microservices; developing custom pages, authentication plug-in, SAML profiles, etc.
84 months experience in Installation, Configuration, Customization, Deployment, Integration and Performance tuning of Oracle Internet Oracle Unified Directory 12cPS4. Configure Oracle Unified Directory - Directory Server and Proxy Server. Extend the directory schema and create vitual attributes as per the use cases.
84 months experience with JAVA, scripting languages such as Shell, PowerShell, JavaScript, configuring SSL in Oracle Fusion Middleware products etc to automate various tasks in the implementations. Configure to leverage API usage in all Oracle IAM components for various use cases.
84 months experience in various SAML and Federation libraries and integrations with different products such as SimpleSAMLPHP, Shibboleth, Okta, Ping, etc.
84 months experience in container platform to deploy and run 12c microservices releases in Oracle Access Management such Advanced Authentication in containers. Experience in Kubernetes platform.
84 months experience in WebLogic deploying applications, debugging issues in the application server, configuring providers such as LDAP, SAML Asserters and configuring role-based access in the WebLogic domain.
84 months experience in Active Directory integrations and migrations from LDAP based authentication to Single Sign On tools for authentication and authorization.
84 months experience in developing custom Oracle BI Publisher reports.
Résumé
Copy of Candidate Identification (i.e., Driver’s License/Green Card/Visa and Passport if applicable)
Any documents referenced in the above Requested Qualifications (i.e., professional certifications, degrees, etc.)