Oracle OIM / OID Administrator (11g to 12c Upgrade)

Job description

Job Description: Oracle OIM / OID Administrator (11g to 12c Upgrade) Location: Muscat, Oman Duration: 12 Months Position Summary We are looking for a hands-on Oracle OIM / OID Administrator to support and evolve the Oracle Identity and Access Management platform for our client in Muscat, Oman. The role centres on the upgrade of Oracle Identity Manager and Oracle Internet Directory from 11g to 12c, and on the integrations that depend on them, chiefly Oracle E-Business Suite and Oracle Hyperion. The ideal candidate has personally carried out at least one OIM 11g to 12c upgrade, is comfortable customizing adapters, connectors and event handlers, and has delivered EBS and Hyperion integrations in production. This is a delivery role, not an architecture-only role: strong hands-on skills are essential. Key Responsibilities 1. 11g to 12c Upgrade and Platform Administration • Plan and execute OIM 11g R2 PS3 to OIG 12c (12.2.1.3 / 12.2.1.4) upgrades end to end: pre-upgrade readiness checks, RCU schema upgrade, Upgrade Assistant, reconfiguration of domains and post-upgrade validation. • Plan and execute OID 11g (11.1.1.9) to OID 12c (12.2.1.4) upgrades, including schema upgrade, DIP migration and verification of replication and directory integrity. • Decide on in-place vs. out-of-place upgrade approach, prepare rollback plans and run upgrade rehearsals in lower environments before production cut-over. • Migrate and re-test customizations during upgrade: custom connectors, adapters, event handlers, scheduled tasks, plugins, SOA composites and UI/sandbox customizations. • Upgrade connectors (EBS, LDAP/OID, DB, Flat File) to 12c-compatible ICF versions and resolve reconciliation and provisioning regressions. • Apply bundle patches and PSUs to OIG, OID, SOA, WebLogic and OHS using OPatch, and maintain environment parity across Dev, Golden, Staging, Production and DR. • Administer WebLogic domains, managed servers, clusters, Node Manager and Enterprise Manager; perform health checks, performance tuning and capacity planning. 2. Oracle Identity Manager (OIM / OIG) • Design and configure identity lifecycle: trusted reconciliation, joiner/mover/leaver, self-registration and sponsored registration, provisioning and de-provisioning, role lifecycle and access policies. • Adapter development and customization using Design Console: process task adapters, entity adapters, pre-populate adapters and rule generators; debug and refactor legacy adapters. • Customize ICF connectors and develop custom connectors where out-of-the-box connectors do not fit. • Java development for custom applications using servlets, JSPs and JavaScript. • OIG customization and understanding of Sandboxes, including: 1. UI customization using ADF 2. Plugins and deploying them using the plugin utility 3. Scheduled tasks 4. Event handlers (pre-process, post-process, validation etc.) • Configuration and scheduling of OIG tasks. • Export/import of sandboxes and MDS between environments. • Build and maintain SOA approval workflows and request catalog configuration. • Configure password policies, notification templates, organizations, admin roles and certification campaigns. 3. Oracle Internet Directory (OID) • Install, configure and administer OID 11g/12c, including instances, replication (multi-master / fan-out), ACIs and password policies. • Configure and manage Directory Integration Platform (DIP) synchronization and provisioning profiles, including OID–EBS provisioning and AD/OID synchronization. • Perform LDIF-based data migration, bulk loads and schema extensions; monitor and tune OID performance. • Integrate OID with OIM (LDAP/OID connector) and OAM as the identity store. 4. Oracle EBS Integration • Configure and support the OIM EBS connectors (EBS User Management and EBS HRMS/Employee Reconciliation) for user and person/position provisioning. • Implement EBS provisioning covering both Person/Position in EBS HRMS and FND User provisioning with responsibilities. • Support EBS SSO through OAM WebGate and EBS AccessGate, and maintain OID–EBS integration (DIP provisioning profiles, user linking). • Troubleshoot reconciliation, responsibility assignment and SSO issues jointly with the EBS DBA and functional teams. 5. Oracle Hyperion Integration • Integrate Hyperion / EPM Shared Services with OID (or AD) as an external user directory provider. • Automate Hyperion user and group provisioning from OIM using custom or generic connectors (for example DB Application Table or Flat File), including group and role mapping. • Support Hyperion SSO through OAM/OHS and resolve user, group and provisioning issues with the EPM team. 6. Access Management and Other Integrations • Integrate OIG, OID/OUD and OAM for end-to-end user management and single sign-on. • Deployment of OAM plugins and configuration of authentication modules and schemes. • Configure MFA (Email / OTP), SSO with third-party IdPs and single logout in OAM. • Configure reverse proxy rules on OHS and deploy WebGates. • Support integrations with Oracle Analytics, Paradiso LMS and ManageEngine SDP. 7. Support, Compliance and Documentation • Provide L1/L2 (and L3 escalation) support; analyse OIM, OID, SOA and WebLogic logs to resolve incidents. • Ensure the IAM implementation meets Oman regulatory requirements and standards such as ISO 27001, and support security assessments and audits. • Produce and maintain upgrade runbooks, playbooks, configuration guides and operational documentation. • Work with architects and the client to gather requirements, run workshops and hand over knowledge to client teams. Required Qualifications • Bachelor’s degree in Computer Science, Information Technology or a related field. • At least 5+ years of relevant experience in Oracle IAM, with hands-on OIM/OIG and OID administration and development. • Has personally delivered at least one OIM 11g to 12c upgrade (and ideally an OID 11g to 12c upgrade) through to production. • Strong hands-on experience with OID administration, replication and DIP. • Proven delivery of Oracle EBS integration with OIM (EBS UM / HRMS connectors) and OID/AccessGate for SSO. • Hands-on experience integrating Oracle Hyperion / EPM Shared Services with OID/OIM. • Hands-on adapter customization in Design Console, plus event handlers, scheduled tasks and connector customization. • Proficient in Java, SQL/PLSQL and Linux shell scripting; working knowledge of SOA composites. • Strong WebLogic administration: domains, clustering, Node Manager, Enterprise Manager, OPatch. • Good understanding of LDAP, SAML, OAuth 2.0 and OpenID Connect. Preferred Qualifications • Experience with OAM 12c, OUD and OHS/WebGate configuration. • Experience with OIG 12c REST APIs and newer connector versions. • Oracle IAM certification (OIM/OAM) or security certifications such as CISSP, CISM or Security+. • Prior consulting or client-facing experience, ideally in the GCC region. Client Environment • Identity Governance: Oracle Identity Manager 11g moving to OIG 12c, with self-registration, sponsored registration, identity and role lifecycle. • Directory: Oracle Internet Directory 11g moving to 12c, Oracle Unified Directory. • Access Management: OAM SSO with third-party IdP, MFA (Email / OTP), single logout. • Target applications: Oracle EBS (Person/Position and User provisioning), Oracle Hyperion, Oracle Analytics, Paradiso LMS, ManageEngine SDP. • Environments: Dev, Golden, Staging, Production and DR. Skills and Competencies • Technical Expertise: Deep hands-on skills in OIM/OIG 12c, OID and their integration with EBS and Hyperion. • Upgrade Discipline: Methodical approach to planning, rehearsing and executing upgrades with minimal downtime. • Problem-Solving: Able to diagnose complex reconciliation, provisioning and directory issues from logs and data. • Communication: Explains technical topics clearly to technical and non-technical audiences. • Collaboration: Works effectively with EBS, EPM, DBA and security teams and with client stakeholders. Work Environment • Based on-site in Muscat, Oman. Requirements