Job Description

Systems Architect- Expert

CUNY requires one consultant to provide ongoing support and
maintenance to integrate/migrate colleges’ applications with CUNY
Login SSO.

Core Responsibilities and Essential Duties:
1.Research and Analysis:
   o Work with CUNY colleges’ IT and application teams to inventory and
assess current AD-integrated applications.
   oAnalyze application use cases and document the authentication
mechanisms in use.

2.Migration Planning:
   oDesign a migration plan for each application and integration using
AD to shift authentication mechanisms to OAM Federation, including
SAML or other federated services.
   oCollaborate with application vendors and owners to define detailed
requirements for migration.
   oEnsure that best practices are applied in shifting from AD-based
authentication to federated Identity Providers (IDPs).

3.Implementation and Integration:
   oConfigure and migrate selected applications from on-premises
Active Directory authentication to Oracle Access Manager Federation
services.
   oThoroughly test the application migrations in a test environment
before production deployment.
    oTroubleshoot any issues arising during migration, including
federation (SAML) issues and cross-platform authentication challenges.

4.Documentation and Knowledge Transfer:
   oDocument all migration procedures, challenges, and resolutions.
   oProvide knowledge transfer to CUNY staff through detailed
documentation and live demonstrations.

5.Collaboration and Support:
   o Work closely with CUNY’s teams, including networking, application,
and support teams, to troubleshoot issues and ensure smooth
integration.

Qualifications:

• 84 months of experience with Active Directory Authentication and Identity
  Management solutions.
• 84 months experience migrating applications from Active Directory to
  federated services like OAM Federation.
• 84 months experience in troubleshooting and debugging skills for identity
  related integration issues across platforms
• 84 months experience in working with authentication protocols: SAML,
  OAuth, and OpenID Connect
• 84 months experience in collaborating with cross-functional teams including
  network, application, and Oracle support teams.