Job Details

Senior Principal Security Engineer

Do you thrive on the leading edge of cloud technology and security? At Oracle Cloud Infrastructure (OCI), we are building and operating a suite of massive scale, integrated cloud services in a broadly distributed, multi-tenant cloud environment. OCI is providing best-in-cloud products that meet the needs of customers who are tackling some of the world's biggest challenges. The OCI Core Services organization is the engineering and operations backbone of Oracle Cloud Infrastructure. It's responsible for the design, build, and run-time delivery of the foundational IaaS building blocksCompute, Networking, and Block Volumethat every higher-level OCI service depends on. This is a global footprint, with hundreds of thousands of network devices supporting millions of servers, connected over a mix of dedicated backbone infrastructure and the Internet.

Why OCI Core Services?

OCI Core Services powers millions of customer workloads with enterprise-grade performance, isolation, and security. Our solutions range in size from small, embedded clouds to some of the most massive cloud infrastructures in the world. You'll join a fast-paced, cross-functional organization, work with proven technical leaders, take on bleeding-edge infrastructure challenges, and have the opportunity to shape the security posture of Oracle's next-generation public cloud.

Responsibilities

What are we looking for?

The OCI Core Services organization is looking for a Senior Principal Security Engineer that will be the technical security leader for OCI's foundational components. You will advise our engineering organizations on secure design, threat modeling, and security architecture of new features; establish security guardrails; design new internal security processes and tooling; and partner closely with product, engineering, and operations organizations to embed security at every layer of our global cloud platform. You will clearly communicate your ideas to senior executive leadership. Your vision will help shape the future of OCI. This is a full-time role based with room to be remote for the right candidate.

Basic Qualifications

• Bachelor's or Master's degree in Computer Science, Engineering, or a related field (or equivalent).
• 10+ years of hands-on security engineering experience.
• Experience working in a large ISP or cloud provider environment.
• Deep expertise in one or more areas: hypervisor security, network security (SDN, firewalls, zero-trust), or data encryption and integrity.
• Proficient in threat modeling and conducting secure design reviews of complex systems.
• Prior coding background (e.g. Java, Go, C/C++, Python), preferably with experience building and deploying security automation tools and libraries.

Preferred Qualifications

• Prior role as a Principal or Senior Principal Security Engineer at a major cloud provider (OCI, AWS, Azure, GCP).
• Hands-on experience building OCI or AWS services.
• Experience with CI/CD pipelines, infrastructure as code (Terraform/Ansible), and embedding security checks in build/test workflows.
• Demonstrated track record of collaborating with product and engineering teams to deliver secure cloud services at Internet scale.
• Experience deploying security services within a major cloud provider.
• Experience with using formalized threat modeling frameworks (e.g. STRIDE, PASTA) in large organizations.
• Expert level knowledge of the following network protocols: IPv4, IPv6, TCP, BGP, OSPF, IS-IS, MPLS, RSVP-TE, VxLAN, EVPN, DNS, and DHCP.
• Experience in GPU/RDMA network environments, High Performance Compute (HPC), or InfiniBand technologies.
• Experience with network monitoring and telemetry solutions, network configuration management, linux systems administration.
• Experience leading security-related technical troubleshooting calls and performing post-mortem analysis.

Disclaimer: Certain US customer or client-facing roles may be required to comply with applicable requirements, such as immunization and occupational health mandates.

Range and benefit information provided in this posting are specific to the stated locations only US: Hiring Range in USD from: $96,800 to $251,600 per annum. May be eligible for bonus, equity, and compensation deferral. Oracle maintains broad salary ranges for its roles in order to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect Oracle's differing products, industries and lines of business.

Oracle US offers a comprehensive benefits package which includes the following: 1. Medical, dental, and vision insurance, including expert medical opinion 2. Short term disability and long term disability 3. Life insurance and AD&D 4. Supplemental life insurance (Employee/Spouse/Child) 5. Health care and dependent care Flexible Spending Accounts 6. Pre-tax commuter and parking benefits 7. 401(k) Savings and Investment Plan with company match 8. Paid time off: Flexible Vacation is provided to all eligible employees assigned to a salaried (non-overtime eligible) position. Accrued Vacation is provided to all other employees eligible for vacation benefits. For employees working at least 35 hours per week, the vacation accrual rate is 13 days annually for the first three years of employment and 18 days annually for subsequent years of employment. Vacation accrual is prorated for employees working between 20 and 34 hours per week. Employees working fewer than 20 hours per week are not eligible for vacation. 9. 11 paid holidays 10. Paid sick leave: 72 hours of paid sick leave upon date of hire. Refreshes each calendar year. Unused balance will carry over each year up to a maximum cap of 112 hours. 11. Paid parental leave 12. Adoption assistance 13. Employee Stock Purchase Plan 14. Financial planning and group legal 15. Voluntary benefits including auto, homeowner and pet insurance