What are the responsibilities and job description for the System Architect/ Active Directory Identity Management Consultant (ADIM position at Steneral Consulting?
Job Title: System Architect/ Active Directory Identity Management Consultant (ADIM)
Location: Remote Work 80%, On site (Campus) 20% Office location is 395 Hudson Street, 6th FL, New York, NY 10014.
Experience: Senior/Expert (7) years Oracle Identity Governance experience required)
Duration: 24 months
Core Responsibilities and Essential Duties:
- Research and Analysis:
- o Work with CUNY colleges' IT and application teams to inventory and assess current AD[1]integrated applications.
- o Analyze application use cases and document the authentication mechanisms in use.
- Migration Planning:
- o Design a migration plan for each application and integration using AD to shift authentication mechanisms to OAM Federation, including SAML or other federated services.
- o Collaborate with application vendors and owners to define detailed requirements for migration.
- o Ensure that best practices are applied in shifting from AD-based authentication to federated Identity Providers (IDPs).
- Implementation and Integration:
- o Configure and migrate selected applications from on-premises Active Directory authentication to Oracle Access Manager Federation services.
- o Thoroughly test the application migrations in a test environment before production deployment.
- o Troubleshoot any issues arising during migration, including federation (SAML) issues and cross-platform authentication challenges.
- Documentation and Knowledge Transfer:
- o Document all migration procedures, challenges, and resolutions.
- o Provide knowledge transfer to CUNY staff through detailed documentation and live demonstrations.
- Collaboration and Support:
- o Work closely with CUNY's teams, including networking, application, and support teams, to troubleshoot issues and ensure smooth integration.
- o Liaise with Oracle support teams as necessary to resolve product-related issues during the migration process.
Essential Duties:
Key responsibilities include, but are not limited to:
Work with vendors and application owners (At colleges) to define the requirements for each application for SSO integrations using OAM Federation Services such as SAML.
Setup and configure applications in the test environments. Prepare the OAM environment to test various use cases based on the requirements and discussions with various stakeholders.
Integrate SAML applications in production OAM and Thoroughly test the applications' integrations in end-to-end flow.
Work with vendors and application owners to confirm applications are functioning as expected.
Thoroughly document all details and tasks involved with various integrations, developing solutions in OAM.
Work closely with application teams on integrating various flavors of applications for SSO. Should be able to independently troubleshoot and fix issues related to Application integrations and/or product related issues.
Configure and customize SSO solution in high availability mode using Oracle Access Management to implement various features such as Federation/SAML, OAuth, Open ID Connect, Multi-Factor Authentication besides current solution setup only for Header Based application integrations.
Maintain the OAM/SSO environments with regular patching.
Strong experience with JAVA, scripting languages such as Shell, PowerShell, JavaScript, configuring SSL in Oracle Fusion Middleware products etc. to automate various tasks in implementations.
Hands on experience in developing custom pages for login and MFA, authentication plug-in, SAML profiles, etc.
Configure to leverage API usage in all Oracle IAM components for various use cases.
Configure to leverage API usage in all Oracle IAM components including Oracle Microservices - Oracle Advanced Authentication (OAA) and Oracle Adaptive Risk Management (OARM) for various use cases.
Strong troubleshooting skills in debugging various internal and external integration issues not limited to the products but also OS related, Load balancers, Firewalls, App Servers, etc., and collaborate with external teams such as Oracle Support, Networking, Systems, DBA and Application Teams to resolve in timely manner.
Work closely with other teams to identify and solve issues.
Other duties as assigned.
Mandatory Qualifications:
84 months of experience with Active Directory Authentication and Identity Management solutions.
84 months experience migrating applications from Active Directory to federated services like OAM Federation.
84 months experience in troubleshooting and debugging skills for identity-related integration issues across platforms.
84 months experience in working with authentication protocols: SAML, OAuth, and OpenID Connect
84 months experience in collaborating with cross[1]functional teams including network, application, and Oracle support teams.
Typical Software Used for Engagement:
Microsoft Active Directory (On-Premises), Azure AD (Entra ID), Oracle Access Manager, Oracle Unified Directory, Oracle HTTP Server, Oracle Advance Authentication, Oracle Internet/Virtual Directory, Kubernetes, WebLogic, BI Publisher, Microsoft: AD (On-Prem and Azure Cloud Tenant); RHEL and Windows OS
Typical Hardware Used for Engagement:
Data Center on VMs
