Cloud Security Engineer – Oracle

Talanto; Northern (KY); Hybrid; USD 100,000 - 150,000; Full time

Job summary

BV Teck is seeking a Cloud Security Engineer specializing in Oracle Cloud Infrastructure to design, implement, and operate security controls across OCI, Oracle Cloud Applications, and hybrid Oracle environments.

You will lead vulnerability management, regulatory compliance, and security automation using Python and Terraform, while mentoring application and infrastructure teams.

Qualifications

• 5+ years of cloud security experience with hands‑on OCI work.
• Deep knowledge of OCI IAM, identity federation, and RBAC.
• Experience with Cloud Guard, Vault, Data Safe and CIS benchmarks.
• Strong scripting (Python, Bash) and Terraform skills.

Responsibilities

• Design and implement OCI security architectures for tenancies and guardrails.
• Configure identity domains, federation, and RBAC across OCI workspaces.
• Operate OCI Vault with key rotation and HSM integration.
• Harden OCI compute, networking, and databases to CIS standards.
• Operate OCI Cloud Guard, tune detectors, remediate findings.
• Integrate OCI logging, audit, and SIEM for monitoring & forensics.
• Implement data security with OCI Data Safe (data masking, discovery).
• Lead vulnerability management incl. image scanning and patching.
• Drive PCI-DSS, HIPAA, SOC 2, ISO 27001, FedRAMP compliance.
• Conduct threat modeling and architecture reviews for OCI workloads.
• Lead security incidents on OCI; containment and post‑mortem reviews.
• Develop security automation using Python, Terraform, OCI CLI/SDK.
• Maintain architecture diagrams, runbooks, and onboarding docs.
• Mentor engineers and provide security guidance across teams.

Skills

OCI

Cloud Security

Python

Terraform

RBAC

Identity Federation

SIEM

Vulnerability Management

Compliance

Tools

OCI CLI/SDK

OCI Vault

OCI Cloud Guard

OCI Data Safe

OCI Logging/Audit

Job description

8,333 – 12,500 $

Important: if an employer asks you to log into their system via iCloud or Google, send a code, an SMS or Telegram password, run some code, or install software — refuse. These are signs of fraud.

•••••••••••••••••••••• is a technology consulting and software development company delivering cloud, AI, data, and enterprise solutions across the United States.

This is a fantastic opportunity to join an established and well-respected organization offering tremendous career growth potential.

Job Title: Cloud Security Engineer - Oracle

Location: 100% Remote (U.S.)

Position Type: Full-time, Direct W2

Salary Range: $100,000–$150,000 Annually

Experience Required: 6+ years

Sponsorship: U.S. Citizens, Green Card Holders, EAD Holders, and H-1B transfer candidates are encouraged to apply. We are unable to sponsor new H-1B visa petitions for this position.

Job Summary: We are seeking an experienced Cloud Security Engineer - Oracle responsible for designing, implementing, and operating security controls across Oracle Cloud Infrastructure (OCI), Oracle Cloud Applications, and hybrid Oracle environments.

Key Responsibilities:

• Design and implement enterprise security architectures for OCI tenancies, including landing-zone guardrails, security zones, and compartment policies.
• Configure and operate OCI Identity Domains, federation with corporate IdPs, and strong RBAC strategies across the tenancy.
• Implement strong key management and secrets handling using OCI Vault, including key rotation and HSM integration where appropriate.
• Harden OCI compute, networking, and database workloads using CIS benchmarks, OCI Security Zones, and internal security standards.
• Operate OCI Cloud Guard for continuous detection and response, tuning detectors and remediating findings.
• Configure and operate OCI Logging, OCI Audit, and integration with SIEM platforms for centralized monitoring and forensics.
• Implement data security controls using OCI Data Safe, including data masking, sensitive data discovery, and privileged user analysis.
• Lead vulnerability management programs, including image scanning, patching, and remediation tracking.
• Drive compliance with regulatory frameworks such as PCI-DSS, HIPAA, SOC 2, ISO 27001, or FedRAMP.
• Conduct threat modeling and architecture reviews for new OCI workloads.
• Lead security incident response on OCI, including containment, investigation, and post-incident review.
• Develop security automation tooling using Python, Terraform, and OCI CLI/SDK.
• Maintain comprehensive, current technical documentation — including architecture diagrams, design decisions, configuration references, runbooks, and operational procedures — so that the system remains supportable, auditable, and easy to onboard new engineers onto over time.
• Provide mentorship and security guidance across application and infrastructure teams.

Required Qualifications:

• 5+ years of cloud security experience, with strong hands-on time on OCI.
• Deep experience with OCI Identity, IAM policies, and identity federation.
• Hands-on experience with OCI Cloud Guard, Security Zones, Vault, and Data Safe.
• Solid understanding of cloud-native security frameworks and CIS benchmarks.
• Experience with vulnerability management and patching tooling.
• Working knowledge of regulatory frameworks (PCI-DSS, HIPAA, SOC 2, ISO 27001).
• Strong scripting skills (Python, Bash) and Terraform.
• Experience integrating cloud workloads with SIEM platforms.

Preferred Qualifications:

• Oracle Cloud Security Professional certification.
• CISSP, CCSP, or equivalent industry security certifications.
• Experience with multi-cloud security architectures.
• Familiarity with SOAR platforms and automated incident response.
• Exposure to zero-trust architecture patterns.

•••••••••••••••••••••• is an Equal Opportunity Employer.

Equal Employment Opportunity (EEO) Statement

•••••••••••••••••••••• (BV Teck) is committed to equal employment opportunity (EEO) for all employees and applicants without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, veteran status, or any other protected status as defined by applicable federal, state, or local laws. This commitment extends to all aspects of employment, including recruitment, hiring, training, compensation, promotion, transfer, leaves of absence, termination, layoffs, and recall.

BV Teck expressly prohibits any form of workplace harassment or discrimination. Any improper interference with employees' ability to perform their job duties may result in disciplinary action up to and including termination of employment.