IT Security Operations

Stratford Solutions Inc.; Village of Nyack (NY); On-site; USD 120,000 - 160,000; Full time

Job summary

Stratford Solutions Inc. is seeking a hands-on Cloud Security Consultant to provide security design, engineering, implementation, and oversight for an enterprise OCI environment supporting PeopleSoft applications.

The consultant will work with Application Security, IAM, Network Security, Data Security, Cloud Engineering, DBA, Architecture, and application teams to secure the OCI landing zone and PeopleSoft deployment onsite.

Qualifications

• 4–6 years of experience in Cloud Security Engineering or related roles.
• Strong hands-on experience with Oracle Cloud Infrastructure (OCI) security services and architecture.

Responsibilities

• Design, implement, and maintain security controls for OCI.
• Support security architecture and implementation of OCI landing zones and enterprise cloud environments.
• Configure OCI security components: policies, compartments, Security Zones.
• Implement OCI Web Application Firewall (WAF), load balancing, vaults, and key management.
• Design and support secure cloud network architectures: subnets, firewalls, NAT, private endpoints.
• Monitor cloud security events, logs, and metrics; integrate with SIEM.
• Identify risks, vulnerabilities, and misconfigurations; recommend remediation.
• Collaborate with IAM, Network Security, Data Security, and DevSecOps teams.

Skills

Cloud security engineering

OCI security services

Security architecture

SIEM monitoring

Tools

OCI WAF

OCI Vault

Key Management

Compartments

Security Zones

Firewalls

NAT

OCI Cloud Guard

Prisma

SIEM

Job description

We are seeking a hands-on Cloud Security Consultant to provide security design, engineering, implementation, and oversight for an enterprise Oracle Cloud Infrastructure (OCI) environment supporting PeopleSoft applications.

This position will be responsible for helping ensure that the cloud environment is secure, hardened, compliant, and continuously monitored in accordance with established cybersecurity standards and best practices. The consultant will work closely with Application Security, IAM, Network Security, Data Security, Cloud Engineering, DBA, Architecture, and application teams to support the implementation and ongoing security of the OCI landing zone and PeopleSoft deployment.

Please note: This position requires the consultant to work onsite.

Key Responsibilities

• Design, implement, and maintain security controls for Oracle Cloud Infrastructure (OCI).
• Support the security architecture and implementation of OCI landing zones and enterprise cloud environments.
• Configure and manage OCI security components, including policies, compartments, and Security Zones.
• Implement and support OCI Web Application Firewall (WAF), Load Balancing, Vault, Key Management, and other cloud security services.
• Design and support secure cloud network architectures, including subnets, firewalls, NAT, private endpoints, and network access controls.
• Ensure cloud environments are appropriately hardened, monitored, and aligned with cybersecurity and compliance requirements.
• Implement and support Cloud Security Posture Management (CSPM) capabilities using Oracle Cloud Guard, Prisma, Wiz, or similar tools.
• Monitor cloud security events, audit logs, and security metrics and support integration with SIEM and other monitoring platforms.
• Identify security risks, vulnerabilities, and misconfigurations and recommend or implement appropriate remediation.
• Support security assessments and reviews for enterprise applications deployed in cloud environments.
• Collaborate with Application Security teams on application security, secure architecture, API security, and vulnerability remediation.
• Partner with IAM teams to support secure identity, access, authentication, authorization, and privileged access controls.
• Work with Network and Cloud Engineering teams to implement secure connectivity and network security controls.
• Support DevSecOps practices by integrating security considerations into cloud and application delivery processes.
• Participate in security design reviews, technical discussions, and architecture meetings.
• Develop and maintain security documentation, standards, procedures, and technical recommendations.
• Communicate security risks, findings, and recommendations effectively to technical teams and stakeholders.

Required Qualifications

• 4–6 years of experience in Cloud Security Engineering, Cloud Security Consulting, Cybersecurity Engineering, or a related technical role.
• Strong hands-on experience with Oracle Cloud Infrastructure (OCI) security services and architecture.
• Experience working with:
• Compartments
• Security Zones
• OCI WAF
• OCI Vault
• Key Management
• Firewalls
• NAT
• Strong Cloud Security Engineering background.
• Experience with Cloud Security Posture Management (CSPM) tools such as Oracle Cloud Guard, Prisma

Cloud, Wiz, or similar platforms

• Experience securing enterprise applications deployed in cloud environments.
• Strong understanding of cloud network security and security architecture.
• Knowledge of application security, DevSecOps, and API security.
• Experience with security logging and monitoring, including SIEM platforms, cloud audit logs, events, and

security metrics

• Ability to identify cloud security risks, vulnerabilities, configuration issues, and compliance gaps.
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent verbal and written communication skills.
• Ability to collaborate effectively with cross-functional technical teams.

Preferred Qualifications

• Experience supporting or securing PeopleSoft applications and architecture.
• Experience with Azure and/or AWS cloud security as a secondary cloud platform.
• Experience working with Application Security, IAM, Network Security, Data Security, DBA, and Cloud Engineering teams.
• Knowledge of enterprise identity and access management principles.
• Experience with secure cloud landing zone design and implementation.
• Familiarity with enterprise cybersecurity frameworks, security controls, and compliance requirements.
• Relevant cloud or cybersecurity certifications are a plus.