Oracle Fusion Security Specialist

Oracle Fusion Security Specialist

Denton, TX

Mid-Level position 

Optimized Technical Solutions (OTS) is looking for Oracle Fusion Specialist. The Application Security Specialist is responsible for designing, implementing, and managing comprehensive security practices and access control frameworks for Oracle Applications Cloud (HCM, ERP, EPM, etc.).

The Security Specialist will ensure the development and enforcement of role-based access controls (RBAC), and segregation of duties (SoD) to ensure regulatory compliance and mitigation of security risks. The specialist will collaborate closely with functional teams to translate business requirements into secure, auditable access models while maintaining full observability of user activity and resource usage.

This position is instrumental in implementing secure identity and access management (IAM) solutions, including SSO, MFA, directory integration, and automated provisioning & de-provisioning processes. Additionally, the role includes continuous monitoring of access patterns, detection of anomalies, and active participation in audit and compliance initiatives

As a member of the IT Services (ITS) team, the Application Security Specialist is expected to uphold the division's mission and contribute positively to a collaborative, human-centered, innovative, accountable, transparent, and inclusive culture within ITS. Work is performed under general supervision and performance evaluation is based upon completion of assignments and results obtained. The performance evaluation is conducted through the performance evaluation system and in accordance with the University Policies & Procedures.

Job Responsibilities include:

• a) Oracle Fusion Application Security Administration:

  • Administer user roles and permissions within Oracle applications cloud (HCM, Financials, EPM, etc.).
  • Administer the Oracle Security Console to create and manage custom security roles.
  • Perform day-to-day security operations & role management.
  • Create, configure and maintain users, provision and de-provision users, create and manage roles.
  • Monitor and maintain onboarding/offboarding processes.
  • Troubleshoot user access issues.
  • Regularly review and audit access logs and user activities for anomalies or violations.
  • Develop and maintain documentation of security configurations, roles, policies, and procedures.
  • Stay current on security trends, advancements, and technology solutions.

  b) Oracle Fusion Application Security Analysis:

  • Create and maintain security roles catalog for Oracle Fusion applications.
  • Create and maintain segregation of duties (SoD) matrix for Oracle Fusion applications.
  • Design and configure security roles, duty roles, abstract roles and data access sets based on business needs and best practices.
  • Conduct regular reviews of user access rights and application roles to enforce the principle of least privilege.
  • Ensure compliance with internal controls, audit requirements, and segregation of duties (SoD) policies.
  • Create security and audit reporting using OTBI, Oracle BIP and other reporting tools.
  • Support internal and external audits.
  • Ensure compliance with standards such as FERPA, HIPAA, etc.

Required Qualifications:

• Bachelor's degree in Computer Science, Information Security, Information Systems, or a related field. Additional job-related experience may substitute for the required education on a year-for-year basis.
• Over 5 years of experience as application security specialist, application security administrator, application security analyst or equivalent in Oracle Fusion Cloud applications (HCM, ERP, SCM, EPM, etc.).
• Experience managing and implementing application security in Oracle Fusion ERP, HCM and other Fusion applications.
• Experience in Oracle Security Console, IDCS and OIM.
• Experience in creating audit and security reports using OTBI, Oracle BI Publisher or equivalent tools.
• Experience implementing Role-based access control (RBAC).
• Experience implementing segregation of duties (SoD).
• Strong understanding of security concepts, protocols and frameworks e.g. IAM, OAuth, SAML, OpenID, SSO, and MFA.
• Strong analytical and problem-solving skills.
• Ability to work independently and as part of a team.

Additional Desired Qualifications

• Relevant information security related certifications.
• Experience working with information systems' security within a higher education setting.
• Knowledge of Texas Administrative Code (TAC 202) IT Security Controls.
• Knowledge of Department of Information Resources (DIR) Security Control Standards.
• Familiarity with regulatory frameworks such as FERPA and HIPAA.

Work Environment

Office environment. Requires ability to provide clear, concise, accurate and timely communication, both verbally and in writing (100%). Requires ability to interact professionally with co-workers, management, and client (100%). Occasional business travel may be required. Only requested and approved expenses will be covered by OTS.

EEO Statement

OTS is committed to hiring and retaining a diverse workforce. We are proud to be an Equal Opportunity/Affirmative Action-Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or protected veteran status. U.S. Citizenship is required for most positions.