Oracle Cloud Security Engineer

Habitat For Humanity Of Durham; Durham (NC); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

On-site health and wellness centers

Fully paid parental leave

Job summary

Fidelity Investments in Durham, NC is seeking an Associate Cloud Security Engineer to advance secure-by-default cloud controls across Oracle Cloud Infrastructure (OCI). You will partner with platform, product, and security teams to reduce risk while enabling delivery in a fast-paced environment.

The role emphasizes designing guardrails, implementing policy-as-code, and leading incident response with measurable remediation.

Qualifications

• Bachelor's or master's degree with 4+ years of knowledge and experience in software and cloud infrastructure engineering
• Design, implement, and maintain OCI security guardrails across tenancy and compartment hierarchy using policy-as-code and IaC automation
• Build and optimize cloud detection and response capabilities using OCI logging, monitoring, events, and SIEM integrations
• Experience in defining Cloud IAM, RBAC and principle of least privileges
• Proven expertise in continuous integration and deployment pipelines using Terraform, CFT etc.
• Lead or support cloud security incident response, root cause analysis, and corrective action plans with measurable closure
• Drive vulnerability and misconfiguration management for OCI assets, including risk-based prioritization, exception governance, and remediation tracking
• Preferred Experience leveraging AI‑assisted tools to improve engineering productivity, operational efficiency, or developer workflows
• Preferred Experience in cloud security tools like InsightCloudSec, Wiz, and Zscaler, Defender for Cloud, Cloud Guard, Data Safe

Responsibilities

• Influence the team with new security trends and ability to present risks vs rewards to management
• Develop a point of view on new and emerging trends to advance solutions that result in efficiencies and faster time to market
• Designing and delivering the work for your team in the most efficient manner, delivering the most value to your technical and business partners of Cloud platform
• Actively sharing insights, knowledge, industry practices and developments across the organization

Skills

Terraform

IaC automation

OCI security

IAM RBAC

Incident response

CI/CD pipelines

Vulnerability management

AI-assisted tools

Security monitoring

Education

Bachelor's degree

Master's degree

Tools

Wiz

InsightCloudSec

Zscaler

Defender for Cloud

Cloud Guard

Data Safe

Job description

Oracle Cloud Security Engineer

Fidelity is transitioning to a full-time onsite working model in phases by region and role. See job description for more information.

Onsite

Location

• Durham, NC

Team

• Technology

Experience Level

Associate

Job Description:

Note: Fidelity will not provide immigration sponsorship for this position

The Role

Fidelity is currently seeking a Cloud Security Engineer to join their Cloud Platform and Security Team. It is a fast paced, dynamic environment with multiple cloud platform security responsibilities and . The candidate owns and advances secure-by-default cloud controls across Oracle Cloud Infrastructure (OCI), partnering with platform, product, and security teams to reduce risk without slowing delivery.

• Influence the team with new security trends and ability to present risks vs rewards to management.
• Develop a point of view on new and emerging trends to advance solutions that result in efficiencies and faster time to market
• Designing and delivering the work for your team in the most efficient manner, delivering the most value to your technical and business partners of Cloud platform
• Actively sharing insights, knowledge, industry practices and developments across the organization

The Expertise and Skills You Bring

• Bachelor's or master's degree with 4+ years of knowledge and experience working in software and cloud infrastructure engineering with various technology platforms
• Design, implement, and maintain OCI security guardrails across tenancy and compartment hierarchy using policy-as-code and IaC automation.
• Build and optimize cloud detection and response capabilities using OCI logging, monitoring, events, and SIEM integrations.
• Experience in defining Cloud IAM, RBAC and principal of least privileges
• Proven expertise in continuous integration and deployment pipelines using Terraform, CFT etc.
• Lead or support cloud security incident response, root cause analysis, and corrective action plans with measurable closure.
• Drive vulnerability and misconfiguration management for OCI assets, including risk-based prioritization, exception governance, and remediation tracking.
• Preferred Experience leveraging AI‑assisted tools to improve engineering productivity, operational efficiency, or developer workflows
• Preferred Experience in cloud security tools like InsightCloudSec, Wiz, and Zscaler, Defender for Cloud, Cloud Guard, Data Safe
• Ability to learn and stay curious for new feature validation
• Track security posture KPIs and deliver regular updates on control coverage, remediation velocity, and residual risk to leadership.

The Team

The Cloud Security Engineering team at Fidelity designs, builds, and operates the security foundations that protect our multi-cloud and hybrid platform, spanning Azure, GCP, OCI, and on‑premises private cloud environments. We partner with application, platform, and infrastructure teams to embed security‑by‑design across identity, network, data, workload, and compliance domains, and we build automation, guardrails, and reusable security services that let thousands of developers ship quickly and safely at enterprise scale. Operating in a modern DevSecOps culture, we are actively adopting agentic workflows and AI‑assisted development practices to accelerate secure engineering, automate detection and response, and scale our impact across the enterprise. As a member of the team, you will solve complex, real‑world security problems, influence enterprise‑wide cloud strategy, and grow your career while helping safeguard the financial well‑being of millions of customers.

Fidelity’s Onsite Working Model
Fidelity is transitioning to a full-time onsite working model through a phased rollout across regions and roles. Currently, some roles and locations require 100% onsite presence, while others require less. Onsite expectations are likely to evolve as the rollout continues. This transition does not apply to fully remote roles.

Category:

Information Technology

Please be advised that Fidelity’s business is governed by the provisions of the Securities Exchange Act of 1934, the Investment Advisers Act of 1940, the Investment Company Act of 1940, ERISA, numerous state laws governing securities, investment and retirement‑related financial activities and the rules and regulations of numerous self‑regulatory organizations, including FINRA, among others. Those laws and regulations may restrict Fidelity from hiring and/or associating with individuals with certain Criminal Histories.

Benefits that balance life and work

From our fully paid parent leave to our on‑site health and wellness centers, our benefits support the belief that more balance you have, the better you can achieve your goals.

Company overview

Company overview

At Fidelity, we are passionate about making our financial expertise broadly accessible and effective in helping people live the lives they want. We are a privately held company that places a high degree of value in creating and nurturing a work environment that attracts the best talent and reflects our commitment to our associates. We are proud of our diverse and inclusive workplace where we respect and value our associates for their unique perspectives and experience.

Reasonable accommodations

Fidelity will reasonably accommodate applicants with disabilities who need adjustments to participate in the application or interview process. To initiate a request for an accommodation contact the HR Accommodation Team by sending an email to [e-mail], or by calling 800-835-5099, prompt 2, option 3.

Equal opportunity employer

Fidelity Investments is an equal opportunity employer. We believe that the most effective way to attract, develop, and retain a diverse workforce is to build an enduring culture of inclusion and belonging.

Applicant screening

At Fidelity, we value honesty, integrity, and the safety of our associates and customers within a heavily regulated industry. Certain roles may require candidates to go through a preliminary credit check during the screening process. Candidates who are presented with a Fidelity offer will need to go through a background investigation and may be asked to provide additional documentation as requested. This investigation includes but is not limited to a criminal, civil litigations and regulatory review, employment, education, and credit review (role dependent). These investigations will account for 7 years or more of history, depending on the role. Where permitted by federal or state law, Fidelity will also conduct a pre‑employment drug screen, which will review for the following substances: Amphetamines, THC (marijuana), cocaine, opiates, phencyclidine.

AI Guidelines

Learn about our guidelines for use of AI when applying for a Fidelity job