Principal Security Architect

Key Responsibilities

Security Design Evaluation:

– Evaluates existing security architectures independently to identify and prioritize security design issues and weaknesses.

– Provides in-depth technical advice to support the design and development of secure architectures.

– Identifies gaps and weaknesses in proposed designs of new projects and features and develops complex compensating controls.

– Facilitates architecture discussions and security assessments related to the security design review process and threat modeling.

Security Solutions Design:

– Designs, supports, and/or assesses reviews of complex security solutions for product services and infrastructure both on-premise and cloud.

– Designs systems for implementing security controls and monitoring the security of networks, systems, and applications, ensuring functional goals within the team are achieved.

– Works closely with internal teams (e.g., developers, Product Management, IT, Operations) to develop products that provide in-depth security insights.

Security Solutions Research:

– Conducts standard security research regarding threats, investigates moderately complex issues, and oversees upgrades on security platforms, ensuring the highest levels of system integrity and protection.

– Collaborates closely with internal and external stakeholders (e.g., Oracle Cloud Infrastructure) to refine functional requirements and identify functional gaps in security solutions.

Security Standards and Practice:

– Supports the build or review of security policies, standards, and/or patterns for data security issues and compliance, while also providing guidance on privacy requirements.

– Incorporates regulatory requirements, compliance standards, and threat models to tune implementations and standards for a complex application landscape.

– Develops and updates existing security standards and programming practices for internal service development and service security operational processes.

– Reviews security operations guides for hand-off to the support team for post-launch support.

Identity and Access Management:

– Participates in and architects the generation of Managed Identity and Access Management services and pre-sales activities, providing guidance for resolution of customer-reported issues.

Core Responsibilities

Planning & Execution:

– Manages and coordinates moderately complex tasks, monitoring timelines and deliverables to ensure timely completion and adherence to requirements for a moderately sized project or initiative.

– Efficiently delegates, monitors, and prioritizes work across multiple projects, providing technical oversight and adjusting plans to address shifts in resources or timelines.

Collaboration & Partnership:

– Collaborates across the organization to align on expectations and achieve shared objectives.

– Leverages understanding of business leaders, stakeholders, and/or customers to ensure proposed solutions meet their needs.

– Supports inclusivity by actively seeking and listening to diverse perspectives, ensuring others feel heard and respected.

Problem Solving:

– Identifies and addresses moderately complex issues by analyzing a wide range of data and/or information to identify solutions in accordance with standard practices.

– Proactively escalates unresolved or critical issues with a thorough assessment and suggests potential solutions.

– Reviews, contributes to, and documents problem-solving strategies.

Continuous Learning:

– Pursues learning opportunities to expand knowledge and skills and/or tools in new areas and stays abreast of the latest industry trends and best practices.

– Proactively seeks and leverages ongoing feedback and training to improve skills.

– Coaches and mentors junior team members, fostering continuous learning and knowledge sharing within and across teams.

Continuous Improvement:

– Develops ideas, recommends updates, and/or collaborates on the implementation of process improvements to increase the efficiency and effectiveness of processes, protocols, and workflows across teams, and evaluates the impact on key stakeholders.

– Solicits feedback from others on ideas for alternative approaches and methods for continued improvement.

Performance and Development:

– Contributes to the talent development pipeline by participating in candidate interviews, assessing candidates, and providing hiring recommendations.