Identity Access Management Consultant Senior for Migration to AWS

Must Haves:

• Minimum 5 years experience as a solution engineer on Oracle Identity Access Management systems 12C who has successfully modeled and implemented end-to-end solutions and infrastructure
• Minimum 3 years solution development with 11G OAAM (Oracle Adaptive Access Manager)
• Minimum 5 years in setting up active-active multi-data center configuration and set-up.
• Minimum 3 years integration experience in OAAM and Oracle databases.
• Minimum 3 years in deployment of Oracle applications in Kubernetes environments
• Must be associated with a recognized Gold Oracle IAM Partner.
• Experience translating conceptual to logical to physical application architecture in alignment with business and architecture.
• Able to articulate technical issues and provide options to resolve them clearly and concisely.
• Able to produce clear and concise documentation including design/architecture documents deployment and integration guides and physical application design documents.

Description

Background Information:

• The Agencys ONEID service is a secure identity solution leveraged by the Ministry of Health and numerous health care organizations in Ontario for purposes of accessing patient health information (PHI). The ONEID service enhances protection of PHI and user account information through privacy and security safeguards while providing access to multiple digital health services using the same login credentials. The ONE ID service is based on Oracle 12C Identity Access Management suite including Oracle Access Manager (OAM) Oracle Unified Directory (OUD) Oracle Identity Management (OIM) Oracle Adaptive Authentication Manager (OAAM) Oracle 19C database Microsoft Active Directory and other Agencys custom systems. As such the Agency requires Oracle Access Manager (OAM) and Oracle Unified Directory (OUD) experts with Openshift experience to migrate the systems to AWS.

Responsibilities:

• Work with the Agencys teams in design and development to upgrade the 11G OAAM to OARM on Openshift in AWS
• Document the final design installation configuration and integration procedures for improved availability
• Work collaboratively with other Agencys teams such as database networking and infrastructure.
• Provide weekly updates to team leads and project manager.

Desired Skills:

• Experience with Oracle and Identity and Access Management Suite Plus and Microsoft Active Directory Suite
• Knowledge of general IAM best practises
• Experience triaging analyzing diagnosing (troubleshooting) evaluating options and resolving application problems especially those related to identity and access management systems
• Knowledge of IT security technologies particularly encryption and authentication technologies such as PKI and TLS/SSL
• Excellent organizational skills verbal and written communication skills team working skills
• Experience with monitoring tools e.g. Oracle Enterprise Manager IBM Tivoli
• Experience in working with Agile development and CI/CD pipelines
• Knowledge of JIRA and Confluence
• Experience with Red Hat Openshift

Required Experience / Evaluation Criteria: 100 Points

• Minimum 3 years experience as a solution engineer on Oracle Adaptive Authentication Manager (OAAM) with Oracle Access Manager (OAM) 25 Points
• Minimum 3 years solution development with other Adaptive Authentication systems 25 Points
• Must be associated with a recognized Gold Oracle IAM Partner for over 5 years. 20 Points
• Must know deployment of Oracle Identity and Access management systems such as OAM OUD and OARM on Red Hat Openshift 20 Points
• Development experience in high-availability architecture 10 Points

Deliverables

• Upgrade 11G Oracle Adaptive Authentication Manager (OAAM) to Oracle Adaptive Risk Management (OARM) on Openshift platform and in AWS for both Dev and QA environments.
• OARM system must match the 12C OAM (Oracle Access Manager) stretched cluster configuration.
• Full end-to-end test plan to ensure OARM supports all current ONE ID authentication flows.
• All design and implementation documents for the above tasks.

Additional Terms

• The term of this Engagement Assignment is for 63 Business Days with an option to extend for up to an additional 21 days at the Agencys discretion. The Engagement Assignment may be extended for unused Business Days at the Agencys discretion.
• The resource will comply with the Agencys policies and procedures.
• The Agency systems cannot be accessed from outside the province of Ontario and Agency assets including laptops and related equipment cannot be removed from the province of Ontario without prior written approval from the Agency.
• Assignment Type: This position is currently listed as Hybrid. The resource under this request will be required to work onsite as per Hiring Manager sole discretion.

Knowledge Transfer Details:

• The resource will ensure full knowledge transfer is provided to the Agency team before end of engagement. Some of this might occur at the end of the engagement but will also be shared as information is obtained/consolidated. Key deliverables will be shared with team.
• The resource must provide all related documentation as part of knowledge transfer protocol. Documents will be reviewed by the appropriate leads and signed off by manager/director.
• The resource will work collaboratively with the Agency team throughout the assignment and ensure key deliverables milestones and documentation are shared.
• A walkthrough of any demos development etc. will be required before the end of the engagement.