Principal Security Architect

Evaluates existing security architectures independently to identify and prioritize security design issues and weaknesses. Designs, supports, and/or assesses reviews of complex security solutions for product services and infrastructure both on-premise and cloud. Conducts standard security research regarding threats, investigates moderately complex issues, and oversees upgrades on security platforms, ensuring the highest levels of system integrity and protection. Supports the build or review of security policies, standards, and/or patterns for data security issues and compliance, while also providing guidance on privacy requirements. Participates in and architects the generation of Managed Identity and Access Management (IAM) services and pre-sales activities, providing guidance for resolution of customer-reported issues. Key Responsibilities Security Design Evaluation: – Evaluates existing security architectures independently to identify and prioritize security design issues and weaknesses. – Provides in-depth technical advice to support the design and development of secure architectures. – Identifies gaps and weaknesses in proposed designs of new projects and features and develops complex compensating controls. – Facilitates architecture discussions and security assessments related to the security design review process and threat modeling. Security Solutions Design: – Designs, supports, and/or assesses reviews of complex security solutions for product services and infrastructure both on-premise and cloud. – Designs systems for implementing security controls and monitoring the security of networks, systems, and applications, ensuring functional goals within the team are achieved. – Works closely with internal teams (e.g., developers, Product Management, IT, Operations) to develop products that provide in-depth security insights. Security Solutions Research: – Conducts standard security research regarding threats, investigates moderately complex issues, and oversees upgrades on security platforms, ensuring the highest levels of system integrity and protection. – Collaborates closely with internal and external stakeholders (e.g., Oracle Cloud Infrastructure) to refine functional requirements and identify functional gaps in security solutions. Security Standards and Practice: – Supports the build or review of security policies, standards, and/or patterns for data security issues and compliance, while also providing guidance on privacy requirements. – Incorporates regulatory requirements, compliance standards, and threat models to tune implementations and standards for a complex application landscape. – Develops and updates existing security standards and programming practices for internal service development and service security operational processes. – Reviews security operations guides for hand-off to the support team for post-launch support. Identity and Access Management: – Participates in and architects the generation of Managed Identity and Access Management services and pre-sales activities, providing guidance for resolution of customer-reported issues. Core Responsibilities Planning & Execution: – Manages and coordinates moderately complex tasks, monitoring timelines and deliverables to ensure timely completion and adherence to requirements for a moderately sized project or initiative. – Efficiently delegates, monitors, and prioritizes work across multiple projects, providing technical oversight and adjusting plans to address shifts in resources or timelines. Collaboration & Partnership: – Collaborates across the organization to align on expectations and achieve shared objectives. – Leverages understanding of business leaders, stakeholders, and/or customers to ensure proposed solutions meet their needs. – Supports inclusivity by actively seeking and listening to diverse perspectives, ensuring others feel heard and respected. Problem Solving: – Identifies and addresses moderately complex issues by analyzing a wide range of data and/or information to identify solutions in accordance with standard practices. – Proactively escalates unresolved or critical issues with a thorough assessment and suggests potential solutions. – Reviews, contributes to, and documents problem-solving strategies. Continuous Learning: – Pursues learning opportunities to expand knowledge and skills and/or tools in new areas and stays abreast of the latest industry trends and best practices. – Proactively seeks and leverages ongoing feedback and training to improve skills. – Coaches and mentors junior team members, fostering continuous learning and knowledge sharing within and across teams. Continuous Improvement: – Develops ideas, recommends updates, and/or collaborates on the implementation of process improvements to increase the efficiency and effectiveness of processes, protocols, and workflows across teams, and evaluates the impact on key stakeholders. – Solicits feedback from others on ideas for alternative approaches and methods for continued improvement. Performance and Development: – Contributes to the talent development pipeline by participating in candidate interviews, assessing candidates, and providing hiring recommendations.