Cloud Security Consultant

Role summary
Designs implements and governs cloud solutions on Oracle Cloud Infrastructure (OCI) ensuring security scalability reliability cost efficiency across enterprise workloads manage Oracle database platforms on OCI ensuring performance availability security and lifecycle management across mission-critical workloads.

Key responsibilities

Cloud architecture & design: Create end-to-end OCI reference architectures for new and existing workloads (IaaS/PaaS) including landing zones and multi-tier applications.
Networking: Design VCN architecture (subnets route tables security lists/NSGs) DRGs IPSec/FastConnect load balancers DNS private endpoints and network segmentation.
Identity & security: Implement IAM (compartments policies dynamic groups) MFA/SSO integration key management (OCI Vault/KMS) secret management encryption and security posture management.
Governance & standards: Define tagging strategy compartment model guardrails and architecture standards aligned to enterprise compliance needs.
Resilience & DR: Build HA/DR designs across availability and fault domains regions backup strategy and recovery runbooks (RTO/RPO).
Automation & DevOps: Use IaC (Terraform) CI/CD pipelines configuration management and operational automation; promote reusable modules and patterns.
Observability & operations: Implement logging monitoring alarms tracing and capacity planning; establish SRE-style operational practices.
Migration & modernization: Lead assessments and migrations (on-prem to OCI) including rehost/refactor decisions and performance tuning.
Cost management: Implement FinOps practicesright-sizing budgets quotas reserved capacity where applicable and chargeback/showback.
Stakeholder engagement: Partner with app teams security network and leadership; produce architecture artifacts and lead design reviews.
OCI database platform strategy: Define reference architectures and standards for Autonomous Database Exadata Database Service OCI DB Systems and related HA/DR patterns.
Workload assessment & service fit: Recommend the best OCI database service for OLTP/analytics/mixed workloads factoring performance cost operational ownership and licensing (BYOL vs license included).
HA/DR architecture: Architect and govern RAC/Data Guard/Active Data Guard (as applicable) backup strategy (RMAN/backups) cross-region DR and regular failover testing.
Performance architecture & tuning: Lead sizing AWR/ASH-based tuning SQL optimization indexing/partitioning strategy connection management and throughput/latency validation.
Implement and govern TDE (tablespace/column) TLS in transit and secure wallet/keystore management.
Define key rotation custody and lifecycle processes using approved KMS solutions (e.g. OCI Vault).
Ensure encryption coverage for backups replicas exports and data movement.

Required skills/experience

Strong experience with OCI core services: Compute Networking Block/Object Storage IAM Load Balancing Vault Monitoring/Logging.
Proven cloud architecture experience (enterprise scale) including multi-account/compartment governance.
Hands-on with Terraform (preferred) and automation tooling.
Solid understanding of security and compliance principles (least privilege encryption auditability).
Experience designing HA/DR and operational runbooks.
Experience in Audit Vault and Database Firewall Oracle Data Safe and DB Vault.

Role summary
Designs implements and governs cloud solutions on Oracle Cloud Infrastructure (OCI) ensuring security scalability reliability cost efficiency across enterprise workloads manage Oracle database platforms on OCI ensuring performance availability security and lifecycle management across mission-critical workloads.

Key responsibilities

Cloud architecture & design: Create end-to-end OCI reference architectures for new and existing workloads (IaaS/PaaS) including landing zones and multi-tier applications.
Networking: Design VCN architecture (subnets route tables security lists/NSGs) DRGs IPSec/FastConnect load balancers DNS private endpoints and network segmentation.
Identity & security: Implement IAM (compartments policies dynamic groups) MFA/SSO integration key management (OCI Vault/KMS) secret management encryption and security posture management.
Governance & standards: Define tagging strategy compartment model guardrails and architecture standards aligned to enterprise compliance needs.
Resilience & DR: Build HA/DR designs across availability and fault domains regions backup strategy and recovery runbooks (RTO/RPO).
Automation & DevOps: Use IaC (Terraform) CI/CD pipelines configuration management and operational automation; promote reusable modules and patterns.
Observability & operations: Implement logging monitoring alarms tracing and capacity planning; establish SRE-style operational practices.
Migration & modernization: Lead assessments and migrations (on-prem to OCI) including rehost/refactor decisions and performance tuning.
Cost management: Implement FinOps practicesright-sizing budgets quotas reserved capacity where applicable and chargeback/showback.
Stakeholder engagement: Partner with app teams security network and leadership; produce architecture artifacts and lead design reviews.
OCI database platform strategy: Define reference architectures and standards for Autonomous Database Exadata Database Service OCI DB Systems and related HA/DR patterns.
Workload assessment & service fit: Recommend the best OCI database service for OLTP/analytics/mixed workloads factoring performance cost operational ownership and licensing (BYOL vs license included).
HA/DR architecture: Architect and govern RAC/Data Guard/Active Data Guard (as applicable) backup strategy (RMAN/backups) cross-region DR and regular failover testing.
Performance architecture & tuning: Lead sizing AWR/ASH-based tuning SQL optimization indexing/partitioning strategy connection management and throughput/latency validation.
Implement and govern TDE (tablespace/column) TLS in transit and secure wallet/keystore management.
Define key rotation custody and lifecycle processes using approved KMS solutions (e.g. OCI Vault).
Ensure encryption coverage for backups replicas exports and data movement.

Required skills/experience

Strong experience with OCI core services: Compute Networking Block/Object Storage IAM Load Balancing Vault Monitoring/Logging.
Proven cloud architecture experience (enterprise scale) including multi-account/compartment governance.
Hands-on with Terraform (preferred) and automation tooling.
Solid understanding of security and compliance principles (least privilege encryption auditability).
Experience designing HA/DR and operational runbooks.
Experience in Audit Vault and Database Firewall Oracle Data Safe and DB Vault.

Career Level - IC2