Services - OCI Security Architect

Responsibilities

• Lead hands‑on implementation of OCI security controls across customer environments, ensuring a positive customer experience.
• Focus on large or complex opportunities requiring secure, scalable, and automated solutions.
• Advise customers on overall solution security architecture, applying Zero Trust and secure‑by‑default principles.
• Design, build, and deliver customer demonstrations, technology workshops, and webinars to showcase Oracle‑based security solutions.
• Participate in or lead customer Proof of Concepts, workshops, or performance/security tests.

• Implement and manage OCI IAM (least privilege policies, dynamic groups, federation/SSO concepts, service‑to‑service access).
• Engineer secure OCI networking and segmentation (VCNs, subnets, route tables, DRGs, gateways) including Zero Trust packet routing concepts.
• Configure and manage Network Security Groups (NSGs) and layered network controls to enforce workload isolation and least access.
• Implement OCI Vault for keys and secrets management (access policies, lifecycle, rotation, integrations).
• Configure and operationalize OCI Cloud Guard (detectors/responders), including tuning, alerting, and response workflows.
• Deliver database security controls (encryption, auditing, privileged access controls) and integrate with OCI Data Safe for assessments and monitoring.
• Ensure security controls align with organizational policies on security, privacy, and data governance.

• Build repeatable, secure deployments using Terraform modules, environments, state management, and drift detection.
• Set up CI/CD pipelines (e.g., Jenkins) with security gates and approvals.
• Implement Git Ops workflows with PR‑based change control and promotion across environments.
• Use Ansible for configuration management and orchestration.

• Create customer‑ready documentation including architecture artifacts, high‑level and low‑level designs, runbooks, deployment guides, handover documentation, and troubleshooting guides.
• Gather requirements and lead discovery with customer stakeholders (security, compliance, networking, identity, operations).
• Run customer workshops (landing zone/security design sessions, IAM/network segmentation working sessions, threat modeling discussions).
• Support pre‑sales by contributing to solutioning, estimates, delivery approach, and customer presentations/briefings.
• Understand competitive landscape and communicate opportunities to up‑sell based on product expertise.
• Liaise with the Oracle ecosystem (Account Teams, Sales Consulting, Product teams, communities, cross‑LOB teams).

• Lead small delivery teams, coordinate work, and ensure high implementation quality.
• Review designs and Infrastructure‑as‑Code for security, quality, and maintainability.
• Mentor team members on OCI security services, automation standards, and delivery patterns.

• Deep, hands‑on expertise in three or more of the following areas: OCI architecture and secure landing zone/tenancy patterns; networking & Zero Trust segmentation, routing patterns, and secure connectivity; IAM least privilege policy design, dynamic groups/service identities, federation/SSO concepts;
  Network Security Groups and layered network security controls; OCI Vault KMS/secrets management, access policies, rotation, integration into platforms/pipelines;
  Cloud Guard posture management, detectors/responders, tuning and operationalization;
  Data Safe/database security auditing, assessment, encryption, privileged access controls; automation/Dev Ops Terraform, Jenkins, Git Ops, Ansible.
• Relevant degree or at least 5 years of industry experience in a similar role.
• 5‑7 years overall industry experience in security, infrastructure, networking, or cloud engineering roles.
• 5+ years of cloud experience, including security architecture and hands‑on implementation.
• Strong hands‑on implementation experience delivering cloud security controls end‑to‑end (not advisory‑only).
• Strong ability to design security architectures and translate requirements into implementable designs.
• Experience producing professional customer…