Role Overview:This role focuses on implementing and enforcing robust security controls within Oracle Cloud Infrastructure (OCI) environments. The successful candidate will leverage policy-as-code (PaC) tools like Sentinel and infrastructure automation tools such as Terraform to define frameworks, improve guardrails, and ensure secure-by-default configurations across various cloud platforms. The position also involves troubleshooting complex issues related to OCI native offerings and securing Oracle PaaS environments.
Key Responsibilities: - Define and develop policy-as-code frameworks (e.g., Sentinel and cloud native) and Infrastructure-as-Code tools (e.g., Terraform).
- Improve Policy-as-Code (PaC) and guardrails (Sentinel, native cloud policies) by closely working with CNAPP to enforce secure-by-default configurations across cloud platforms.
- Troubleshoot, reproduce, and determine the root cause for customer-reported issues related to Public Cloud native offerings such as Oracle Analytics Cloud, Oracle Integration Cloud, Storage, and Streaming.
- Build tools for faster diagnosis of underlying architectures.
- Ensure high availability while maintaining the highest level of security and visibility in cloud architecture.
- Secure Oracle PaaS environments, including Data and Network security, workload isolation, and policy enforcement.
Required Skills: - 1-5+ years of experience with Oracle Cloud Infrastructure foundational capabilities: IAM, VPC, Cloud Logging, Security controls, Storage, and Compute.
- 1-5+ years of experience with Policy as a Code (Sentinel) and Infrastructure automation tools (Terraform), with a focus on implementing security controls for all types of cloud native infrastructure.
- In-depth understanding of Public Cloud native offerings such as Oracle Analytics Cloud, Oracle Integration Cloud, Storage, and Streaming, and their underlying architectures.
- Understanding of cloud architecture to ensure high availability, security, and visibility.
- Experience securing Oracle PaaS environments, including Data and Network security, workload isolation, and policy enforcement.
- Experience with Logging and Monitoring tools such as Cloud logging, metrics, and XQL.
- Software development experience in one of the OO programming languages: Java, Go, or Python.
Preferred Skills: - FinOps (cloud) domain knowledge.
