Oracle Security Application Administrator

DCCA is a veteran-owned IT business specializing in providing innovative solutions to a variety of government agencies and commercial enterprises since 1982.  DCCA is proud to offer career growth opportunities and a competitive compensation and benefits package.  Visit our website at: www.dcca.com 

Oracle Security Application Administrator

Candidate must have or be able to obtain an ADP I or ADP II clearance

General job duties:

• Communication
  • Oracle Security Application Administrator must interface with other DBAs, Application Administrators (AA), third-party system administrators, Program Management Office, Leadership, and the end-user community. 
  • College-level communications skills, being able to communicate clearly, both orally and with written communications.
• Education/Certification
  • Bachelor’s degree from an accredited university in a related field (computer science, engineering, or information systems);
    • May substitute 15 years of experience for a bachelor’s degree;
  • 7 years of experience to include one of more of the applications: primarily Oracle® E-Business System (Federal) experience in a Solaris /UNIX environment, as well as Oracle Business Intelligence (OBIEE), Information, Control M, Connect Direct, Prism (IIS), and Solutions Business Manager
    • Working knowledge of UNIX shell scripting and/or Perl.
    • Experience with Public Key Infrastructure (PKI) authentication.
  • Splunk Enterprise – creating and monitoring dashboards, reports, alerts on database audit and log data 
  • The Security Application candidate should have a good understanding of Department of Defense (DoD) Risk Management Framework (RMF), NIST SP 800-53A security controls, and Security Technical Implementation Guide (STIG).   Working experience with eMASS is desired. To include IIS, WebLogic, Apache, HTTP, ColdFusion, as well as Application Security and Development
  • Candidates MUST have or be able to obtain a Security certification within 6 months of hire date.

Specific job duties:

• Sustain and enhance the security posture of 10 diverse applications.
  • Monitor Applications for compliance and IA activities necessary to protect data from unauthorized access, use, disclosure, disruption, modification, perusal, inspection, recording or destruction.
  • Develop, update and enforce policies, procedures and standards dictated by guidelines produced by government and program mandates.
  • Gather system and security controls documentation.
  • Track vulnerabilities by creating Plan of Action and Milestones (POA&M)
  • Manage the configuration and documentation contained in the program’s instance of Enterprise Mission Assurance Support Services (eMASS).
  • Report on application-related Information Assurance Vulnerability Alerts (IAVA) and ensure timely completion.
• Continuous monitoring of DoD STIG compliance to include IIS, WebLogic, Apache, HTTP, ColdFusion, as well as Application Security and Development
  • Review new STIG releases and communicate changes to the Applications teams
  • Create and maintain a template checklist with detailed steps to address each requirement in a systematic approach across all applications.
  • Maintain and enforce standard operating procedures to comply with applicable RMF controls
  • Create automated STIG configuration checks that result in non-compliance notifications
  • Perform annual self-assessment across all applications and track open vulnerabilities.
  • Assist and advise the Applications teams on possible solutions to open vulnerabilities and STIG compliance.  Possible proof of concepts may be required to demonstrate secured functionality.
• Enforce the continuous monitoring strategy through the use of tools such as Splunk, ACAS reports, scripts to perform application user/privilege review, etc.
• Advise on secure implementation strategies for Application projects such as upgrades, etc.
• Code Reviews for application development and configuration management activities, established by the Change Management Plan and Change Management Working Group. 

The proposed salary range for this position in Colorado is 105,000 to 118,000. Final salary will be determined based on various factors. Our comprehensive benefit offerings include healthcare, retirement plan, paid disability and life insurance programs, employee assistance program, paid and unpaid leave programs, education assistance, and wellness initiatives

COVID Safety Requirements

DCCA is committed to the safety of our workforce and customers, adhering to COVID-19 Safety Protocols as required by the company, our customers and the Safer Federal Workforce Task Force. Some customer facilities require all employees to provide proof of vaccination status as a condition of employment, subject to approved medical or religious accommodations. Mask wearing and frequent COVID testing/attestation may also be required.

DCCA is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, protected veteran status, or disability status.