Jose Kurian

Senior Oracle Security Consultant with 15+ years of Oracle ERP administration, security architecture, and Cloud SaaS delivery experience, including 5+ years of hands-on Oracle Fusion Cloud ERP and EPM security administration and Identity Governance design spanning Oracle Access Governance (OAG), Fusion Security Console, OCI IAM, and Oracle Risk Management Cloud across multiple full life-cycle Oracle Fusion Cloud implementations. Expert in Oracle Fusion Security Console administration — designing and troubleshooting Role-Based Access Control (RBAC), custom job/duty/data roles, security profiles, and Role Management Design (RMD) patterns to enforce least-privilege access across Oracle Fusion Cloud ERP, EPM, HCM, and SCM environments. Hands-on Oracle Risk Management Cloud (RMC) practitioner supporting Advanced Access Controls, Advanced Financial Controls, segregation-of-duties (SOD) analysis, access certifications, risk assessments, and remediation workflows — and mapping those RMC control libraries to Oracle Access Governance preventive SOD checks during access request and fulfillment for SOX and internal-audit readiness.

Designs and implements Oracle Access Governance capabilities for enterprise IGA: identity orchestration (authoritative sources and managed systems), Workday / Fusion HCM / Active Directory attribute correlation, access bundles (Fusion job roles with security context), RBAC / ABAC / PBAC models, code-less access-request and approval workflows, and event-based / periodic access certification campaigns. Integrates OAG with Oracle Fusion Cloud Applications and Workday as HR authoritative sources, OCI IAM and Microsoft Active Directory / Entra ID for directory identity, ServiceNow for access-request and fulfillment tickets, and OAG REST / generic connectors for lifecycle provisioning, deprovisioning, role assignment, and access-approval governance.

Advises

Infrastructure, AD, Procurement, Supply Chain, HR, Security, and application owners on least-privilege role catalogs, Access Guardrails, SOD exception paths, reviewer campaigns, and audit evidence packs that combine OAG enterprise-wide access dashboards with RMC violation and certification reporting. Manages the full Oracle SaaS environment lifecycle — quarterly release readiness, patch testing and validation, environment refreshes, configuration import/export, backup and migration-set management, production monitoring, and outage/incident response — minimizing disruption across Dev, Test, and Production pods. Skilled in migrating and troubleshooting technical objects across environments, including BI Publisher (BIP) reports, BI Cloud Connector (BICC) extracts, and Enterprise Scheduler Service (ESS) jobs, ensuring reporting and scheduled-process continuity through every quarterly update.

Manages the end-to-end support lifecycle through Oracle My Oracle Support (MOS) Service Requests and ServiceNow incident/change tickets against defined SLAs, partnering closely with Security, Develop

Oracle Cloud Developer / Enterprise AI Architect / Administrator | Identity Governance (OAG) at Hybrid Cloud Services (2023-04 – Present)

Administer Oracle Fusion Cloud ERP, HCM, and EPM security and lead Oracle Access Governance design for identity orchestration — correlating worker and contractor attributes from Fusion HCM / HR sources with Active Directory and OCI IAM, and provisioning Fusion accounts through access bundles that carry job roles plus data security context.

• Define user lifecycle management in OAG-aligned patterns: joiner–mover–leaver provisioning and deprovisioning, birthright vs requestable roles, manager and application-owner approval workflows, sequential processing for sensitive finance identities, and emergency / global account termination runbooks coordinated with ServiceNow change and incident SLAs.
• Partner with Infrastructure, Active Directory, Procurement, Supply Chain, HR, Security, and application teams to translate business access policies into OAG identity collections (ABAC), RBAC catalogs, Access Guardrails, and RMC Advanced Access Controls so SOD is evaluated at request time before fulfillment.
• Design access-certification campaigns (periodic user access, event-based reviews on transfer, OCI IAM policy reviews, and ownership reviews) and produce auditor-ready evidence combining OAG who-has-access-to-what dashboards with RMC violation, certification, and remediation history.
• Guide connector and integration strategy for Workday-class HCM authoritative sources, Fusion managed systems, AD / Entra ID, OAG REST APIs, and ServiceNow request / role-assignment / role-removal workflows; troubleshoot identity correlation, matching rules, and fulfillment failures across pods.
• Manage user access provisioning and de-provisioning, auto-provisioning rules, and mass-user updates using HCM Data Loader (HDL), coordinating elevated-access requests and security-governance monitoring across multiple Oracle Fusion Cloud environments.
• Implement row-level security, attribute-based access control, and column-level masking within Fusion Data Intelligence (FDI) semantic layers, extending SOX, GDPR, and HIPAA-compliant data-access boundaries to both human users and AI agents.
• Support Oracle SaaS environment management — quarterly release readiness and patch validation, environment refreshes, configuration import/export, and backup/migration-set promotion across Dev, Test, and Production — coordinating Oracle My Oracle Support (MOS) Service Requests and ServiceNow tickets to resolve platform issues within SLA.
• Migrate and troubleshoot technical objects including BI Publisher (BIP) reports, BI Cloud Connector (BICC) extracts, and Enterprise Scheduler Service (ESS) jobs to maintain reporting and scheduled-process continuity through every quarterly update.
• Established a Human-in-the-Loop (HITL) escalation and audit-trail framework for Oracle Fusion AI Agents Studio, routing high-value transactions to designated approvers and satisfying internal-audit and SOX expectations — extending Fusion RBAC governance patterns into agentic AI use cases.
• Partner with Security, Development, and Product teams to triage integration, access, and environment-health issues, driving root-cause analysis and remediation across OIC, FDI, and Fusion Cloud.