Identity Access Management Consultant

Project Overview

Support the IFIS User Access Modernization - IFIS Identity Governance, Risk and Compliance (GRC) Pilot Initiative with four Fee-for-Service resources.

Key Responsibilities

• Define target-state architecture for identity data, account data, entitlement data, request management, approvals, certifications, provisioning, and reporting.
• Establish application onboarding patterns for enterprise applications.
• Design identity collection, access collection, and access bundle strategy.
• Define and build approval architecture across manager, business owner, application owner, compliance, fixed approver, and delegated approver models.
• Define certification campaign architecture including review scope, certifier ownership, remediation behavior, and evidence requirements.
• Define the boundary between standard platform capability, custom UI, middleware, Identity orchestration layer and downstream target systems.
• If needed, ensure custom UI or external workflow components are build so they do not bypass governance, approval, audit, or certification controls.
• Build provisioning and deprovisioning architecture, including integration points and status tracking.
• Review and approve functional designs, technical designs, integration designs, and testing strategy.
• Lead client-facing architecture walkthroughs and design sign-off discussions.

Qualifications & Requirements

REQUIRED

• Must be able to work 5 days onsite per week
• Ideally should have architecture exp with OAG core, application and architecture
• 10+ years of experience in Identity Governance and Administration, with strong experience working with Oracle Identity Management and Oracle Access Governance
• 4+ years of experience working with Oracle Access Governance and its deployment at enterprise customers with 60,000+ user identities
• Deep understanding of Oracle Access Governance identities, accounts, entitlements, roles, permissions, access bundles, request catalogs, approvals, and certifications.
• Oracle Identity Governance, OIM, or Oracle IAM architecture experience.
• Oracle EBS or ERP access model experience.

NICE TO HAVE

• Experience deploying Oracle Access Governance with an Government agency and its various ministries and divisions
• Prior OPS/public exp

EVALUATION CRITERIA

• 10+ years of experience in Identity Governance and Administration, with strong experience working with Oracle Identity Management and Oracle Access Governance - 8%
• 4+ years of experience working with Oracle Access Governance and its deployment at enterprise customers with 60,000+ user identities - 8%
• Experience deploying Oracle Access Governance with an Government agency and its various ministries and divisions - 5%
• Deep understanding of Oracle Access Governance identities, accounts, entitlements, roles, permissions, access bundles, request catalogs, approvals, and certifications. - 8%
• Experience in building an Identity Orchestration Layer that could interface with Oracle Access Governance (OAG) and provide intelligent rule making, SoD management and user hierarchy decisions. - 5%
• Experience in end to end design and deployment of Oracle Access Governance reporting solution by leveraging the streaming services provided by Oracle - 8%
• Experience designing end-to-end access request, approval, fulfillment, review, and lifecycle governance processes. - 8%
• Strong Java and API expertise in supporting complex user lifecycle management operation requirements with Oracle Access Governance. - 5%
• Experience in building and securing a REACT based User Interface and integrating it with Oracle Access Governance, while ensuring user security, context driven workflows and auditability. - 4%
• Expert-level development of custom connectors and adapters using Oracle Access Governance Generic REST connectors, and orchestration for non-standard systems (e.g., proprietary apps, legacy mainframes, or complex SaaS without prebuilt connectors), including full reconciliation and provisioning. - 2%
• Experience implementing enterprise SoD (Segregation of Duties) frameworks with custom risk policies, automated violation detection/remediation, building access guardrails for preventive and detective checks, integration with Oracle Risk Management Cloud (RMC), and handling of high-risk entitlement certifications across hybrid landscapes. - 4%
• Hands-on implementation of Oracle Access Governance APIs for full automation, including programmatic access requests/approvals, policy enforcement, identity orchestration, and deep integration with enterprise applications - 5%
• Experience defining application onboarding strategy for complex enterprise systems. - 4%
• Strong understanding of audit, compliance, access review, and traceability requirements. - 8%
• Ability to create architecture diagrams, data flow diagrams, sequence diagrams, and solution decision records. - 8%
• Oracle Identity Governance, OIM, or Oracle IAM architecture experience. - 2%
• Oracle EBS or ERP access model experience. - 2%
• REST API, middleware, OCI, or integration architecture experience. - 2%
• Experience designing governance solutions involving custom portals or request intake layers. - 2%
• Knowledge of maintaining audit traceability across request, approval, provisioning, and review. - 2%

Key Skills & Competencies

Oracle Identity Management, Oracle Access Governance, Identity Governance and Administration, Oracle Identity Governance, OIM, Oracle IAM, Oracle EBS, ERP, Java, API, REACT, REST, Identity Orchestration, SoD, Oracle Risk Management Cloud, Middleware, OCI, Integration Architecture, Streaming Services, Connectors, Adapters