TQUSI0969_5992 - Oracle fusion security architect

Role Summary

The Oracle Fusion Security Architect owns the design, build, and governance of the application security model across Oracle Fusion Cloud (ERP, SCM, Procurement, HCM, Projects, EPM). The role delivers a scalable, globally deployable role-based security architecture that meets functional, data, and reporting access requirements, eliminates application security gaps, and provides Segregation of Duties (SoD) compliance for end users. The architect works closely with business process owners, internal audit, IT security, and integration teams through design, build, validation, deployment, and ongoing monitoring.

Key Responsibilities Security Strategy & Architecture

• Define the application security and controls strategy, standards, and governance framework for the Oracle Fusion landscape.

• Design a standardised, scalable and globally deployable security model aligned to the to-be business process design.

• Author the Security & Controls Design Document and secure sign-off from business, IT security and audit stakeholders.

• Align the security model with organisation structure, legal entities, business units, and multi-country rollout requirements.

Role Design & Build

• Design Job Roles, Duty Roles, Abstract Roles, Data Roles and custom roles using pre-configured security role templates as a baseline.

• Configure function security, data security policies, role hierarchies and privileges via the Security Console.

• Build and unit-test security roles; iterate through design workshops with process owners.

• Own draft and final user-to-role mapping, including bulk provisioning and role assignment rules.

Segregation of Duties & Controls

• Perform SoD analysis on designed roles; identify conflicts, define remediation and mitigating controls.

• Maintain the SoD ruleset, risk-control matrix and exception register.

• Identify opportunities to replace manual controls with delivered, configurable Oracle Cloud automated controls.

• Define the IT controls framework covering security, operations and change management controls.

• Support internal and external audit reviews, SOX walkthroughs and evidence requests.

Identity & Access Management

• Define the SSO design using security role design and user profile attributes as input to policy configuration.

• Integrate Fusion with IDCS / OCI IAM, Microsoft Entra ID, LDAP / Active Directory, MFA and federation services.

• Define Joiner-Mover-Leaver access processes, privileged and emergency (break-glass) access procedures.

• Integrate with IGA/ITSM tooling (SailPoint, Saviynt, CyberArk, ServiceNow) where applicable.

Validation, Deployment & Governance

• Validate Cloud security roles and the associated automated and IT controls prior to production configuration.

• Configure the security and controls solution in production and support hypercare.

• Establish ongoing governance and monitoring - periodic access reviews, user access certification and role change control.

• Define security KPIs, reporting and audit dashboards for steady-state operations.

Skills

Mandatory Skills : Oracle fusion, Cyberark, security