Lead Principal Software Engineer - Secrets Management

Oracle Corporation; Atlanta (GA); On-site; USD 150,000 - 210,000; Full time

Job summary

Oracle Corporation is seeking a security-focused backend engineer to design and operate distributed services for secrets management and key lifecycle. The role emphasizes secure design, scalable APIs, and robust incident response across production environments.

You will collaborate with application, infrastructure, identity, and security teams to raise engineering standards and automate secure workflows, reducing manual intervention while improving trust and data protection.

Qualifications

• Design and operate distributed backend services at scale.
• Strong security engineering judgment across access control, encryption, identity, and key management.
• Experience building reliable APIs, automation, and developer-facing infra.
• Operational excellence in observability, incident response, reliability, and safe production changes.
• Ability to lead ambiguous programs, make durable architecture decisions, and mentor engineers.
• Comfort collaborating with application, infrastructure, identity, and security teams on high-trust systems.
• Practical experience with threat modeling, security reviews, and risk reduction for sensitive data.

Responsibilities

• Design and build secure backend services that store, manage, rotate, and deliver secrets, keys, certificates, and related sensitive materials.
• Improve key exchange mechanisms so services can securely communicate, establish trust, and protect information in transit and at rest.
• Automate secret rotation to reduce manual handling and avoid unsafe credential storage patterns.
• Build reliable APIs, tooling, and workflows that help other teams adopt secrets and key-management capabilities with less friction.
• Improve availability, scalability, monitoring, alerting, and operational safety for security-critical production systems.
• Lead threat modeling, security reviews, design hardening, and sensitive-data exposure analysis across service boundaries.
• Partner with application, infrastructure, identity, and security teams to make secret management consistent across the company.
• Own production quality through incident response, debugging, operational improvements, resiliency work, and reducing manual operations.
• Lead complex projects independently, drive alignment across teams, mentor engineers, and raise the engineering bar for security-sensitive systems.

Skills

Distributed systems

Security engineering

API development

Observability

Mentoring engineers

Cross-team collaboration

Threat modeling

Security reviews

Production risk

Architecture leadership

Job description

Responsibilities

• Design and build secure backend services that store, manage, rotate, and deliver secrets, keys, certificates, and related sensitive materials.

• Improve key exchange mechanisms so software services can securely communicate, establish trust, and protect sensitive information in transit and at rest.

• Make secret rotation safer and more automated, reducing service breakage, manual handling, and unsafe credential storage patterns.

• Build reliable APIs, tooling, and workflows that help other engineering teams adopt secrets and key-management capabilities with less friction.

• Improve availability, scalability, monitoring, alerting, and operational safety for security-critical production systems.

• Lead threat modeling, security reviews, design hardening, and sensitive-data exposure analysis across service boundaries.

• Partner with application, infrastructure, identity, and security teams to make secret management more consistent across the company.

• Own production quality through incident response, debugging, operational improvements, resiliency work, and reduction of manual operations.

• Lead complex projects independently, drive alignment across teams, mentor engineers, and raise the engineering bar for security-sensitive systems.

Qualifications

• Deep experience designing and operating distributed backend services in production at meaningful scale.

• Strong security engineering judgment across access control, encryption, identity, trust boundaries, key management, certificate lifecycle, and failure modes.

• Experience building reliable APIs, automation, and developer-facing infrastructure used by multiple engineering teams.

• Operational excellence in observability, incident response, reliability engineering, scalability, and safe production change management.

• Ability to lead ambiguous technical programs, make durable architecture decisions, influence across teams, and mentor engineers.

• Comfort working with application, infrastructure, identity, and security partners on high-trust, security-sensitive systems.

• Practical experience with threat modeling, security reviews, hardening, and production risk reduction for sensitive-data systems.

*Design, develop, troubleshoot and debug software programs for databases, applications, tools, networks etc.