Lead Principal Software Engineer - Secrets Management

Location: Nashville, TN, United States

Responsibilities

• Design and build secure backend services that store, manage, rotate, and deliver secrets, keys, certificates, and related sensitive materials.

• Improve key exchange mechanisms so software services can securely communicate, establish trust, and protect sensitive information in transit and at rest.

• Make secret rotation safer and more automated, reducing service breakage, manual handling, and unsafe credential storage patterns.

• Build reliable APIs, tooling, and workflows that help other engineering teams adopt secrets and key-management capabilities with less friction.

• Improve availability, scalability, monitoring, alerting, and operational safety for security-critical production systems.

• Lead threat modeling, security reviews, design hardening, and sensitive-data exposure analysis across service boundaries.

• Partner with application, infrastructure, identity, and security teams to make secret management more consistent across the company.

• Own production quality through incident response, debugging, operational improvements, resiliency work, and reduction of manual operations.

• Lead complex projects independently, drive alignment across teams, mentor engineers, and raise the engineering bar for security-sensitive systems.

 

Qualifications

• Deep experience designing and operating distributed backend services in production at meaningful scale.

• Strong security engineering judgment across access control, encryption, identity, trust boundaries, key management, certificate lifecycle, and failure modes.

• Experience building reliable APIs, automation, and developer-facing infrastructure used by multiple engineering teams.

• Operational excellence in observability, incident response, reliability engineering, scalability, and safe production change management.

• Ability to lead ambiguous technical programs, make durable architecture decisions, influence across teams, and mentor engineers.

• Comfort working with application, infrastructure, identity, and security partners on high-trust, security-sensitive systems.

• Practical experience with threat modeling, security reviews, hardening, and production risk reduction for sensitive-data systems.

 

*Design, develop, troubleshoot and debug software programs for databases, applications, tools, networks etc.

About Us

Only Oracle brings together the data, infrastructure, applications, and expertise to power everything from industry innovations to life-saving care. And with AI embedded across our products and services, we help customers turn that promise into a better future for all. Discover your potential at a company leading the way in AI and cloud solutions that impact billions of lives.

True innovation starts when everyone is empowered to contribute. That’s why we’re committed to growing a workforce that promotes opportunities for all with competitive benefits that support our people with flexible medical, life insurance, and retirement options. We also encourage employees to give back to their communities through our volunteer programs.

We’re committed to including people with disabilities at all stages of the employment process. If you require accessibility assistance or accommodation for a disability at any point, let us know by emailing accommodation-request_mb@oracle.com or by calling 1-888-404-2494 in the United States.

Oracle is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability and protected veterans’ status, or any other characteristic protected by law. Oracle will consider for employment qualified applicants with arrest and conviction records pursuant to applicable law.

Overview The Secret Management and Key Exchange Team is hiring a Sr Principal Software Engineer to help design, build, and operate foundational security infrastructure for sensitive credentials, secrets, certificates, encryption keys, and key exchange flows. This engineer will lead complex backend and distributed-systems work that helps services prove identity, retrieve sensitive material safely, rotate credentials without outages, and exchange information only with authorized systems. Why OCI OCI and Oracle platform teams depend on secure, reliable, and easy-to-adopt security infrastructure. This role offers senior technical ownership over systems that sit directly in the trust path for many services, with meaningful impact on service reliability, customer trust, engineering velocity, and the reduction of manual credential handling across the platform.