OCI Security

Valuelabs; United States; Remote; USD 140,000 - 190,000; Full time

Job summary

Valuelabs is seeking an experienced OCI Security Specialist to design, implement, and operate a comprehensive security posture across Oracle Cloud Infrastructure (OCI) in hybrid environments.

You will lead security architecture, IAM governance, data protection, and compliance initiatives, collaborating with cloud architects, DevOps, and compliance teams to embed security across all OCI layers.

Qualifications

• Bachelor’s degree in a related field or equivalent experience.
• 5+ years in cloud security engineering or equivalent.
• Strong knowledge of OCI security services and governance frameworks.

Responsibilities

• Architect and implement end-to-end security frameworks for OCI tenancies.
• Design multi-layer security architectures across perimeter, network, workload, data, and identity.
• Conduct threat modeling and security reviews for OCI workloads and infra.
• Define security baselines, guardrails, and landing zones for OCI environments.
• Evaluate OCI-native and third-party security tools and services.

Skills

Cloud security engineering

OCI security services

IAM governance

Threat modeling

Regulatory compliance

Education

Bachelor’s degree in a relevant field

Tools

OCI Vault

OCI Data Safe

OCI IAM

Job description

Role & responsibilities

We are seeking a highly experienced OCI Security Specialist expertise in cloud security architecture, implementation, and operations on Oracle Cloud Infrastructure (OCI). The ideal candidate will have a strong background in cloud security engineering, identity and access governance, data protection, threat detection, and compliance management within OCI and hybrid cloud environments. The OCI Security Specialist will be responsible for designing and implementing a comprehensive security posture across OCI tenancies, ensuring that workloads, data, networks, and identities are protected in accordance with enterprise security policies and regulatory requirements. This role requires deep expertise in OCI security services, security frameworks (CIS, NIST, ISO 27001), and DevSecOps practices. The candidate will collaborate with cloud architects, network engineers, DevOps teams, compliance officers, and application teams to embed security across all layers of the cloud environment.

Security Architecture & Design:

• Architect and implement end-to-end security frameworks for OCI tenancies aligned with CIS OCI Foundations Benchmark, NIST CSF, and ISO 27001.
• Design multi-layer security architectures including perimeter security, network security, workload security, data security, and identity security.
• Conduct cloud security architecture reviews and threat modeling for OCI-hosted applications and infrastructure.
• Define and enforce security baselines, guardrails, and security landing zones for OCI environments.
• Evaluate and recommend OCI-native and third-party security tools and services.

Identity & Access Management (IAM):

• Design and implement OCI IAM policies, Compartments, Groups, Dynamic Groups, and Federation (SAML, SCIM, LDAP) for enterprise-grade access governance.
• Implement Principle of Least Privilege (PoLP) and Role-Based Access Control (RBAC) across OCI resources.
• Manage OCI Identity Domains, Multi-Factor Authentication (MFA), and Privileged Access Management (PAM) integrations.
• Conduct periodic IAM access reviews and entitlement certifications.
• Implement service account and API key lifecycle management for OCI resources.

Data Security & Encryption:

• Design and implement data encryption strategies for data at rest and data in transit across OCI services.
• Manage OCI Vault (Key Management Service) for customer-managed encryption keys (CMEKs), secrets, and certificates.
• Implement OCI Data Safe for Oracle Database security assessment, data masking, and sensitive data discovery.
• Configure and manage OCI Object Storage encryption, Block Volume encryption, and Database encryption.
• Define and enforce data classification and data handling policies on OCI.