Cloud Security Engineer - OCI (Oracle Cloud Infrastructure)

Accountabilities: Deploy, configure, and maintain cloud security controls across AWS, GCP, Azure, and Oracle Cloud Infrastructure (OCI), including compute, networking, storage, and IAM. Conduct detailed cloud security and architectural risk assessments to identify vulnerabilities, asset exposures, configuration weaknesses, and compliance gaps. Develop practical technical remediation plans and implement targeted solutions to strengthen cloud security without unnecessary disruption. Configure and manage enterprise security technologies, including SIEM and log analytics platforms, identity management solutions, IDS/IPS tools, vulnerability management systems, and network monitoring tools. Serve as a trusted technical advisor for assigned clients, managing project milestones, communication, technical escalations, and ongoing security initiatives. Build automated and repeatable security controls using Infrastructure as Code (IaC), including Terraform and cloud-native deployment technologies. Integrate continuous security guardrails into CI/CD pipelines and containerized environments to identify and address vulnerabilities earlier in the development lifecycle. Investigate cloud security incidents, perform technical analysis and forensic investigation, and implement containment and remediation measures. Support audit readiness through GRC platforms such as Vanta by collecting, validating, and maintaining evidence related to cloud configurations and security controls. Align cloud architectures and technical implementations with security and compliance frameworks such as SOC 2, ISO 27001, GDPR, HIPAA, and related requirements. Contribute to reusable security modules, automation tools, documentation, and engineering practices that improve team efficiency and consistency. Collaborate with technical teams, executives, and client stakeholders to communicate complex security risks in clear, actionable business terms. Requirements Demonstrated hands-on experience securing distributed, multi-cloud environments across AWS, GCP, Azure, and Oracle Cloud Infrastructure (OCI). Strong knowledge of cloud security architecture, including IAM, network segmentation, encryption, access controls, and risk mitigation. Practical experience with OCI services spanning compute, networking, storage, and identity and access management. Advanced Infrastructure as Code and security automation skills, including Terraform, AWS CloudFormation, Python, and Bash. Experience mapping cloud-native configurations and controls to compliance frameworks such as SOC 2, ISO 27001, GDPR, HIPAA, or comparable standards. Strong troubleshooting and analytical skills, with the ability to diagnose infrastructure vulnerabilities, resolve failing controls, and implement effective remediation. Experience with enterprise logging, monitoring, vulnerability management, threat-hunting, and network traffic analysis tools. Familiarity with container and DevSecOps security, including Docker, Kubernetes, microservice architectures, and CI/CD security controls. Practical understanding of Zero Trust security models, identity-centric access policies, network micro-segmentation, and contextual access controls. Strong client-facing consulting skills and the ability to manage multiple priorities and client relationships simultaneously. Excellent written and verbal English communication skills, with the ability to translate technical risks into clear recommendations for technical and executive audiences. Experience working in fast-growth technology companies or managed security service provider environments is valuable. Relevant certifications such as AWS Certified Security – Specialty, Google Professional Cloud Security Engineer, CISSP, CISM, or CISA are preferred. U.S. work authorization is required, with no current or future employment visa sponsorship available for this position. Ability to work a standard schedule of approximately 8:00 AM–5:00 PM U.S. Eastern Time, with occasional flexibility for business needs and global collaboration. Reliable high-speed internet and a professional home-office environment suitable for confidential conversations and uninterrupted remote work. Willingness to travel locally on occasion for onsite meetings, team gatherings, or business activities. Benefits Competitive base salary with performance reviews tied to merit-based progression. Bonus opportunities. Remote-first work environment with flexibility to work from anywhere in the United States. Career development opportunities with mentorship and training. Reimbursement for approved role-related training and certification courses. Opportunity for career advancement within a growing organization. Exposure to diverse cloud security, compliance, DevSecOps, and multi-cloud projects. Collaborative environment with opportunities to work directly with clients and experienced security professionals.