AI Platform Engineer – OCI Security

Jobtailor

Arlington (VA)

On-site

USD 150,000 - 190,000

Full time

4 days ago

Be an early applicant

Application generator

A complete application in a minute — tailored resume and cover letter, ready to send.

Get past ATS filters

Job summary

Jobtailor seeks a senior platform security engineer to design, deploy, and secure Oracle Cloud Infrastructure environments, adapt containerized apps for hardened OCI, and implement IAM, encryption, and vault controls.

You will build IaC with Terraform, integrate CI/CD, enable secure service-to-service communication, and work with AI/ML integrations while aligning with Federal and DoD security requirements.

Qualifications

Bachelor's degree or equivalent in a related field.
5+ years in cloud infrastructure, DevSecOps, or related engineering roles.
Hands-on OCI experience: networking, IAM, storage, security, monitoring.
Strong knowledge of VCNs, subnets, routing, DNS, security groups, private endpoints.
Experience with Terraform or IaC to provision cloud infrastructure.
Experience with CI/CD, source control, and vulnerability scanning.

Responsibilities

Design, deploy, configure, secure, and maintain OCI environments.
Adapt containerized apps for hardened OCI environments.
Implement secure OCI networking, IAM, and DoD/Federal security requirements.
Deploy and support Docker/Kubernetes-based apps (OKE, OCIR).
Integrate Terraform IaC with CI/CD pipelines and source control.

Skills

OCI

IAM

Terraform

Docker

Kubernetes

Cloud Security

CI/CD

Python

Agile/SAFe

Security Compliance

Education

Bachelor's degree in CS/Engineering

Tools

OCI CLI

OCI SDKs

OCIR

Azure DevOps

Job description

Design, deploy, configure, secure, and maintain AI application environments within Oracle Cloud Infrastructure
Adapt containerized applications and supporting services for secured and hardened OCI environments
Design and implement secure OCI networking, including VCNs, private subnets, routing, NSGs, private endpoints, DNS, and enterprise connectivity
Implement and maintain identity, authentication, and authorization capabilities using OCI IAM and approved enterprise identity technologies
Modify authentication, authorization, session management, service identities, and application configuration to meet Federal and DoD security requirements
Design secure service-to-service communication among web applications, AI services, LLMs, APIs, databases, integration services, and enterprise resources
Deploy and support containerized applications using Docker, Kubernetes/OKE, OCIR, or comparable technologies
Configure and secure AI application access to approved LLM services, APIs, enterprise applications, databases, and supporting services
Implement secure AI tool and data integration patterns, including controlled enterprise-service access and MCP-based connections where applicable
Apply least-privilege access, network segmentation, encryption, secrets management, certificate management, and other security controls
Configure and manage OCI Vault, keys, certificates, secrets, service credentials, and sensitive application configuration
Develop and maintain Infrastructure as Code using Terraform or comparable technologies
Integrate platform deployment with source control, CI/CD pipelines, automated builds, security scanning, artifact management, configuration management, and release processes
Configure logging, monitoring, audit trails, metrics, alerts, and operational dashboards
Partner with cybersecurity teams on security controls, hardening, vulnerability remediation, access restrictions, audits, and compliance
Troubleshoot application configuration, OCI networking, IAM, containers, certificates, APIs, service connectivity, authentication, authorization, and cloud infrastructure
Participate in application and architecture reviews
Develop reusable platform standards, security patterns, Terraform modules, deployment templates, technical documentation, and operational procedures
Participate in Agile/SAFe activities including PI Planning, backlog refinement, technical reviews, demonstrations, testing, release readiness, and production support
Perform other duties as assigned

Requirements

Must be a U.S. Citizen with an active Secret security clearance
Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or a related field; equivalent relevant experience may be considered
5+ years of hands-on cloud infrastructure, platform engineering, DevSecOps, cloud security, application infrastructure, or related engineering experience in complex enterprise environments
Hands-on experience with Oracle Cloud Infrastructure (OCI), including networking, compute, IAM, storage, security, logging, monitoring, and cloud-native application services
Strong knowledge of cloud networking including VCNs/VPCs, subnets, routing, DNS, security groups, firewalls, private endpoints, service connectivity, and hybrid connectivity
Strong knowledge of identity and access management, authentication, authorization, least-privilege access, service identities, secrets management, certificates, and encryption
Experience deploying and supporting containerized applications using Docker and Kubernetes/OKE or comparable technologies
Experience with web application architectures and understanding how application authentication, authorization, APIs, services, and infrastructure interact
Experience modifying application configuration, deployment architecture, or supporting code to meet cloud security, networking, identity, or operational requirements
Experience using Terraform or another Infrastructure as Code technology to provision and manage cloud infrastructure
Experience with CI/CD, source control, automated builds, vulnerability scanning, logging, monitoring, and modern DevSecOps practices
Strong troubleshooting skills across application, cloud, container, networking, IAM, and integration layers
Desired: experience deploying or securing artificial intelligence, generative AI, machine learning, or data-intensive applications
Desired: experience with OCI Generative AI, OCI Generative AI Agents, OCI Data Science, or related Oracle AI services
Desired: experience with OCI IAM policies, dynamic groups, resource principals, identity domains, OAuth/OIDC, API authentication, and service-to-service authorization
Desired: experience with OCI Vault, Certificates, Cloud Guard, Security Zones, Logging, Monitoring, private endpoints, and related OCI security services
Desired: experience with OKE, OCIR, OCI Functions, and API Gateway
Desired: experience integrating containerized applications with LLMs, APIs, databases, enterprise services, or AI tool frameworks
Desired: familiarity with MCP, AI agent tool integration, or comparable approaches
Desired: experience securing web applications in hardened environments
Desired: knowledge of AI-specific security concerns including prompt injection, excessive permissions, sensitive-data exposure, insecure tool access, and service-to-service authorization
Desired: working knowledge of Python, Bash, PowerShell, OCI CLI, OCI SDKs, or comparable scripting and automation technologies
Desired: experience working in Agile or SAFe environments and using Azure DevOps or a similar lifecycle-management tool
Preferred: experience supporting secured Federal or DoD enterprise systems
OCI Architect, OCI Security, Kubernetes, Terraform, cloud security, or related certification is a plus

Core Competencies

Demonstrates expertise in designing, deploying, and securing AI application environments within Oracle Cloud Infrastructure, with a strong focus on cloud security, identity management, and containerized application support. Proficient in implementing Infrastructure as Code using Terraform and integrating CI/CD practices to enhance operational efficiency.

Highest-signal resume keywords