Oracle Cloud Security_Senior Engineer

Clean Harbors; Bengaluru, Hyderabad; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Clean Harbors is seeking a Senior Oracle Cloud Security Analyst Applications to lead and implement security across Oracle Fusion Applications (Finance, SCM, HCM, EPM) within the Global Capability Centre. The role focuses on designing and governing secure Oracle environments aligned with enterprise security standards.

You will own RBAC design, IAM (IDCS/OCI IAM), SSO, MFA, and data protection, while supporting SOX, audits, and collaboration with audit, compliance, and security teams.

Qualifications

• 6+ years of experience in Oracle Security / Identity & Access Management.
• Strong hands-on experience with Oracle Fusion Cloud Security (ERP, Sales, SCM, HCM, EPM).
• Expertise in Oracle Roles, Privileges, SoD controls.
• Experience with SSO, OAuth, SAML, MFA, and identity federation.

Responsibilities

• Own end-to-end Oracle Security Architecture across Oracle Fusion Applications (Finance, SCM, HCM, EPM).
• Design and enforce RBAC, duty roles, job roles, and data access policies.
• Architect and manage IAM including IDCS/OCI IAM; implement SSO, MFA and federation.
• Support SOX, audits, and regulatory compliance related to Oracle applications.
• Lead security incident analysis and governance for Oracle integrations.

Skills

Oracle Fusion Cloud Security

RBAC & SoD controls

IDCS / OCI IAM

SSO / OAuth / SAML / MFA

Identity Federation

Tools

Oracle Identity Cloud Service (IDCS)

Job description

The Oracle Cloud Security Sr Analyst Applications role is responsible to support and lead Oracle security initiatives from the Global Capability Centre (GCC). This role is dedicated to Oracle Cloud and Application Security workloads, responsible for designing, implementing, and governing secure Oracle environments aligned with Clean Harbors enterprise security and compliance standards. The role will act as the security owner across Oracle Finance, SCM, HCM, EPM, Sales Clouds and related integrations.

Role & responsibilities

Oracle Cloud Security Architecture & Design

• Own end-to-end Oracle Security Architecture across Oracle Fusion Applications (Finance, SCM, HCM, EPM).
• Design and enforce role-based access control (RBAC), duty roles, job roles, and data access policies.
• Define security standards for new rollouts, enhancements, and integrations. Identity & Access Management
• Architect and manage Oracle Identity & Access Management (IAM) including: o Oracle Identity Cloud Service (IDCS) / OCI IAM o Single Sign-On (SSO), MFA, Federation with Azure AD / Enterprise IdP
• Ensure least-privilege access principles and periodic access recertification. Compliance & Risk Management
• Support SOX, audit, and regulatory compliance related to Oracle applications.
• Perform security risk assessments, segregation of duties (SoD) analysis, and remediation.
• Partner with audit, compliance, and internal security teams during audits. Security Operations & Governance
• Lead Oracle security incident analysis, root-cause investigation, and resolution.
• Establish governance for: o User provisioning/de-provisioning o Security change management o Quarterly access reviews
• Document security architecture, controls, and operating procedures. Integration & Data Security
• Define security standards for Oracle integrations (OIC, REST APIs, third-party systems).
• Ensure data protection, encryption, and secure data flow between Oracle and external systems. Stakeholder Collaboration
• Act as the security SME for Oracle projects, upgrades, and production support.
• Collaborate with functional leads, infrastructure teams, and enterprise security teams.
• Provide guidance and mentoring to GCC support teams on Oracle security best practices

Preferred candidate profile

6+ years of experience in Oracle Security / Identity & Access Management

• Strong hands-on experience with: o Oracle Fusion Cloud Security (ERP, Sales, SCM, HCM, EPM) o Oracle Roles, Privileges, SoD controls o Oracle IDCS / OCI IAM
• Experience with SSO, OAuth, SAML, MFA, and identity federation