OCI IAM Security architect

ValueLabs; India; On-site; INR 1,800,000 - 2,800,000; Full time

Job summary

ValueLabs is seeking a seasoned OCI security architect to design and implement end-to-end security frameworks for OCI tenancies, aligning with CIS benchmarks, NIST CSF, and ISO/IEC 27001. You will lead multi-layered security across perimeter, network, workload, data, and identity domains.

You will conduct threat modeling, security reviews, and establish baselines and guardrails to ensure compliant deployments.

Qualifications

• Experience designing OCI-based security architectures.
• Experience implementing IAM, RBAC, and PoLP.
• Ability to perform threat modeling and risk assessments.
• Strong knowledge of regulatory compliance in cloud.
• Experience with security monitoring and incident response.

Responsibilities

• Design and implement end-to-end security frameworks for OCI tenancies.
• Lead multi-layered security across perimeter, network, workload, data, and identity domains.
• Conduct cloud security reviews and threat modeling for OCI-based apps and infra.
• Establish baselines, guardrails, and secure landing zones for compliant deployments.
• Integrate OCI-native and third-party security tools and SIEM for centralized visibility and response.

Skills

Cloud security

IAM governance

Threat modeling

Regulatory compliance

Incident response

Education

Bachelor's degree in CS/Cybersecurity

Tools

OCI Vault

OCI Data Safe

OCI Network Firewall

SIEM (Splunk)

Job description

Design and implement comprehensive, end-to-end security frameworks for OCI tenancies, aligned with industry standards including the CIS OCI Foundations Benchmark, NIST Cybersecurity Framework (CSF), and ISO/IEC 27001.

Develop multi-layered security architectures encompassing perimeter, network, workload, data, and identity security domains.

Perform cloud security architecture reviews and threat modeling for applications and infrastructure hosted on OCI.

Establish and enforce security baselines, guardrails, and secure landing zones to ensure consistent and compliant deployment across OCI environments.

Evaluate, recommend, and integrate OCI-native and third-party security tools and services to strengthen the overall security posture.

Identity & Access Management (IAM):

Design and deploy scalable OCI IAM solutions, including policies, compartments, groups, dynamic groups, and identity federation via SAML, SCIM, and LDAP.

Enforce the Principle of Least Privilege (PoLP) and Role-Based Access Control (RBAC) across all OCI resources.

Manage OCI Identity Domains, Multi-Factor Authentication (MFA), and integrate Privileged Access Management (PAM) solutions.

Conduct regular access reviews and entitlement certifications to ensure ongoing access governance.

Implement lifecycle management for service accounts and API keys across OCI resources.

Data Security & Encryption:

Architect and implement robust data protection strategies for data at rest and in transit across OCI services.

Manage OCI Vault (Key Management Service) for customer-managed encryption keys (CMEKs), secrets, and digital certificates.

Utilize OCI Data Safe for database security assessments, sensitive data discovery, and data masking.

Configure encryption for OCI Object Storage, Block Volumes, and Oracle Databases.

Define and enforce data classification and handling policies to support compliance and risk mitigation.

Network Security:

Design and deploy network security controls using OCI Network Firewall, Web Application Firewall (WAF), Security Lists, and Network Security Groups (NSGs).

Implement DDoS protection, rate limiting, and traffic scrubbing for internet-facing workloads.

Apply Zero Trust Network Access (ZTNA) principles to secure access to internal resources.

Monitor and analyze VCN Flow Logs, firewall logs, and WAF logs to detect and respond to threats.

Conduct network security assessments and coordinate penetration testing activities.

Implement and manage OCI Cloud Guard for continuous security posture monitoring, threat detection, and automated remediation.

Configure Security Zones and Security Advisor to enforce security policies at the compartment level.

Integrate OCI Logging, OCI Logging Analytics, and OCI Events with SIEM platforms (e.g., Splunk, IBM QRadar, Microsoft Sentinel) for centralized visibility.

Lead security incident response efforts, including investigation, containment, eradication, and recovery.

Develop and maintain incident response plans, playbooks, and runbooks tailored to OCI environments.

Conduct proactive threat hunting and ongoing vulnerability management.

Vulnerability Management & Compliance:

Perform regular security assessments, vulnerability scans, and CIS benchmark compliance checks across OCI environments.

Track and manage remediation of vulnerabilities across workloads and infrastructure.

Ensure adherence to regulatory requirements such as PCI-DSS, HIPAA, GDPR, SOC 2, and ISO 27001.

Leverage OCI Compliance Documents and collect audit evidence to support certification processes.

Implement OCI Audit Service to enable comprehensive...