Oracle Cloud Security Engineer

Requirements

• Design and implement enterprise security architectures for OCI tenancies, including landing-zone guardrails, security zones, and compartment policies.
• Configure and operate OCI Identity Domains, federation with corporate IdPs, and strong RBAC strategies across the tenancy.
• Implement strong key management and secrets handling using OCI Vault, including key rotation and HSM integration where appropriate.
• Harden OCI compute, networking, and database workloads using CIS benchmarks, OCI Security Zones, and internal security standards.
• Operate OCI Cloud Guard for continuous detection and response, tuning detectors and remediating findings.
• Configure and operate OCI Logging, OCI Audit, and integration with SIEM platforms for centralized monitoring and forensics.
• Implement data security controls using OCI Data Safe, including data masking, sensitive data discovery, and privileged user analysis.
• Lead vulnerability management programs, including image scanning, patching, and remediation tracking.
• Drive compliance with regulatory frameworks such as PCI-DSS, HIPAA, SOC 2, ISO 27001, or FedRAMP.
• Conduct threat modeling and architecture reviews for new OCI workloads.
• Lead security incident response on OCI, including containment, investigation, and post-incident review.
• Develop security automation tooling using Python, Terraform, and OCI CLI/SDK.
• Maintain comprehensive, current technical documentation — including architecture diagrams, design decisions, configuration references, runbooks, and operational procedures — so that the system remains supportable, auditable, and easy to onboard new engineers onto over time.
• Provide mentorship and security guidance across application and infrastructure teams.

Benefits

• Competitive base salary commensurate with experience, plus benefits.
• Generous Paid Time Off
• 401k Matching