OCI Security

Role & responsibilities

We are seeking a highly experienced OCI Security Specialist expertise in cloud security architecture, implementation, and operations on Oracle Cloud Infrastructure (OCI). The ideal candidate will have a strong background in cloud security engineering, identity and access governance, data protection, threat detection, and compliance management within OCI and hybrid cloud environments. The OCI Security Specialist will be responsible for designing and implementing a comprehensive security posture across OCI tenancies, ensuring that workloads, data, networks, and identities are protected in accordance with enterprise security policies and regulatory requirements. This role requires deep expertise in OCI security services, security frameworks (CIS, NIST, ISO 27001), and DevSecOps practices. The candidate will collaborate with cloud architects, network engineers, DevOps teams, compliance officers, and application teams to embed security across all layers of the cloud environment.

Security Architecture & Design:
Architect and implement end-to-end security frameworks for OCI tenancies aligned with CIS OCI Foundations Benchmark, NIST CSF, and ISO 27001. - Design multi-layer security architectures including perimeter security, network security, workload security, data security, and identity security. - Conduct cloud security architecture reviews and threat modeling for OCI-hosted applications and infrastructure. - Define and enforce security baselines, guardrails, and security landing zones for OCI environments. - Evaluate and recommend OCI-native and third-party security tools and services. Identity & Access Management (IAM): - Design and implement OCI IAM policies, Compartments, Groups, Dynamic Groups, and Federation (SAML, SCIM, LDAP) for enterprise-grade access governance. - Implement Principle of Least Privilege (PoLP) and Role-Based Access Control (RBAC) across OCI resources. - Manage OCI Identity Domains, Multi-Factor Authentication (MFA), and Privileged Access Management (PAM) integrations. - Conduct periodic IAM access reviews and entitlement certifications. - Implement service account and API key lifecycle management for OCI resources. Data Security & Encryption: - Design and implement data encryption strategies for data at rest and data in transit across OCI services. - Manage OCI Vault (Key Management Service) for customer-managed encryption keys (CMEKs), secrets, and certificates. - Implement OCI Data Safe for Oracle Database security assessment, data masking, and sensitive data discovery. - Configure and manage OCI Object Storage encryption, Block Volume encryption, and Database encryption. - Define and enforce data classification and data handling policies on OCI.