Cloud Security Engineer - OCI (Oracle Cloud Infrastructure)

Team: IT

Location: US

Commitment: Full-time

Workplace Type: remote

Accountabilities

• Deploy, configure, and maintain cloud security controls across AWS, GCP, Azure, and Oracle Cloud Infrastructure (OCI), including compute, networking, storage, and IAM.

• Conduct detailed cloud security and architectural risk assessments to identify vulnerabilities, asset exposures, configuration weaknesses, and compliance gaps.

• Develop practical technical remediation plans and implement targeted solutions to strengthen cloud security without unnecessary disruption.

• Configure and manage enterprise security technologies, including SIEM and log analytics platforms, identity management solutions, IDS/IPS tools, vulnerability management systems, and network monitoring tools.

• Serve as a trusted technical advisor for assigned clients, managing project milestones, communication, technical escalations, and ongoing security initiatives.

• Build automated and repeatable security controls using Infrastructure as Code (IaC), including Terraform and cloud-native deployment technologies.

• Integrate continuous security guardrails into CI/CD pipelines and containerized environments to identify and address vulnerabilities earlier in the development lifecycle.

• Investigate cloud security incidents, perform technical analysis and forensic investigation, and implement containment and remediation measures.

• Support audit readiness through GRC platforms such as Vanta by collecting, validating, and maintaining evidence related to cloud configurations and security controls.

• Align cloud architectures and technical implementations with security and compliance frameworks such as SOC 2, ISO 27001, GDPR, HIPAA, and related requirements.

• Contribute to reusable security modules, automation tools, documentation, and engineering practices that improve team efficiency and consistency.

• Collaborate with technical teams, executives, and client stakeholders to communicate complex security risks in clear, actionable business terms.

Requirements

• Demonstrated hands-on experience securing distributed, multi-cloud environments across AWS, GCP, Azure, and Oracle Cloud Infrastructure (OCI).

• Strong knowledge of cloud security architecture, including IAM, network segmentation, encryption, access controls, and risk mitigation.

• Practical experience with OCI services spanning compute, networking, storage, and identity and access management.

• Advanced Infrastructure as Code and security automation skills, including Terraform, AWS CloudFormation, Python, and Bash.

• Experience mapping cloud-native configurations and controls to compliance frameworks such as SOC 2, ISO 27001, GDPR, HIPAA, or comparable standards.

• Strong troubleshooting and analytical skills, with the ability to diagnose infrastructure vulnerabilities, resolve failing controls, and implement effective remediation.

• Experience with enterprise logging, monitoring, vulnerability management, threat-hunting, and network traffic analysis tools.

• Familiarity with container and DevSecOps security, including Docker, Kubernetes, microservice architectures, and CI/CD security controls.

• Practical understanding of Zero Trust security models, identity-centric access policies, network micro-segmentation, and contextual access controls.

• Strong client-facing consulting skills and the ability to manage multiple priorities and client relationships simultaneously.

• Excellent written and verbal English communication skills, with the ability to translate technical risks into clear recommendations for technical and executive audiences.

• Experience working in fast-growth technology companies or managed security service provider environments is valuable.

• Relevant certifications such as AWS Certified Security – Specialty, Google Professional Cloud Security Engineer, CISSP, CISM, or CISA are preferred.

• U.S. work authorization is required, with no current or future employment visa sponsorship available for this position.

• Ability to work a standard schedule of approximately 8:00 AM–5:00 PM U.S. Eastern Time, with occasional flexibility for business needs and global collaboration.

• Reliable high-speed internet and a professional home-office environment suitable for confidential conversations and uninterrupted remote work.

• Willingness to travel locally on occasion for onsite meetings, team gatherings, or business activities.

Benefits

• Competitive base salary with performance reviews tied to merit-based progression.

• Bonus opportunities.

• Remote-first work environment with flexibility to work from anywhere in the United States.

• Career development opportunities with mentorship and training.

• Reimbursement for approved role-related training and certification courses.

• Opportunity for career advancement within a growing organization.

• Exposure to diverse cloud security, compliance, DevSecOps, and multi-cloud projects.

• Collaborative environment with opportunities to work directly with clients and experienced security professionals.