DescriptionJob Description
The Oracle Cloud Infrastructure (OCI) team can provide you the opportunity to build and operate a suite of massive scale, integrated cloud services in a broadly distributed, multi-tenant cloud environment. OCI is committed to providing the best in cloud products that meet the needs of our customers who are tackling some of the world’s biggest challenges.
Oracle’s Cloud Infrastructure (OCI) builds Infrastructure-as-a-Service that operates at a high scale in a broadly distributed multi-tenant cloud environment. Our customers run their businesses on our cloud, and our mission is to provide them with best-in-class compute, storage, networking, database, security, and an ever-expanding set of foundational cloud-based services. These are exciting times in our space - we are growing fast and working on ambitious new initiatives.
We are building a Zero Trust Network Service team at OCI and this position will focus on Public Key Infrastructure(PKI), Network Routing and Firewalls for security using key based authentication and cloud service level authorisation. Our mission is to build and operate a set of Zero Trust Network services through a combination of network security technologies and access management (IAM) solutions, multi-factor authentication (MFA), software-defined perimeters (SDP), and cloud-based security solutions. The goal is to create a more resilient and secure network that reduces the risk of data breaches and cyberattacks, especially in today's highly dynamic and distributed computing environments.
The PKI integration with network routing using edge routers and controllers to perform a user to device to workload mapping for access end points. These functions will generate logs, audit trails, metrics, and alerts to enable automated and manual assurance of code as well as ingress/egress traffic. The team will be responsible for the performance, scalability, and reliability of the service too. In particular, they will be responsible for ensuring that the performance of the application. They will optimise the code to ensure low overhead and they will scale the service to handle increase in traffic and in the frequencies of application updates.
Career Level - IC4
ResponsibilitiesKey Responsibilities
As a member of the software engineering division, you will apply expert to advanced knowledge of software architecture to perform software development tasks associated with developing, debugging or designing software applications or operating systems according to provided design specifications. Build enhancements within an existing software architecture and occasionally suggest improvements to the architecture.
The ideal candidate will be technically strong and productive; someone who knows how to balance speed and quality with iterative and incremental improvements. You understand operational excellence and know-how to infuse a culture of being proactive within your team. You have the ability to recommend and justify changes to new and existing products and establish consensus with data-driven approaches.
As a Principal Software Engineer with 10 to 15+ years of experience, you will be a key member of the OCI Zero Trust Network (PKI Service team), responsible for designing, developing, and operating a suite of network service which uses PKI solution to authenticate, route traffic using edge routers using network routing algorithms and security technologies. You will work closely with a team of software engineers to create a secure service. This critical PKI based network service aims to enhance security and resilience, reducing the risk of data breaches and cyberattacks in dynamic and distributed cloud environments. Your responsibilities will include:
- Design and Development: Utilise your expertise in software architecture and security principles to design, develop, and enhance the secure edge zero trust services. Implement solutions that enable automated and manual assurance of code, while ensuring optimal performance and low overhead.
- Network Integration: Leverage your understanding of Zero Trust principles, PKI, identity and access management (IAM) solutions, multi-factor authentication (MFA), and software-defined perimeters (SDP) to create a secure and robust network infrastructure.
- Security and Compliance: Apply security best practices to the entire development lifecycle, from design to deployment. Conduct through code reviews, vulnerability assessments, and recommend security improvements based on data-driven approaches.
- Cloud Infrastructure and Networking: Have a strong sense of cloud infrastructure and networking knowledge to ensure seamless integration of the zero trust services into the broader OCI environment including VPN, IPSec, DRG, VCNs and transforming corporate network to cloud network
- Performance and Scalability: Optimise the secure edge routers and controllers to handle increasing traffic and application updates, while ensuring the overall performance and reliability of the zero trust network services.
- Collaboration and Agile Environment: Work collaboratively with cross-functional teams in an agile environment, contributing your expertise, providing mentorship, and fostering a culture of proactive problem-solving and continuous learning.
- Monitoring and Operations: Devise, manage, and extend monitoring solutions for large-scale environments. Respond to operational challenges and mission-critical incidents as part of on-call duties.
Job Requirements / Basic Qualifications: To succeed in this role, you should possess the following qualifications and skills:
- Bachelor’s degree in computer science or a related technical field, or equivalent practical experience. Master's degree preferred.
- 10+ years of experience with back-end development for cloud network services.
- Proficiency in high-level programming languages such as Java or C/C++, GO along with scripting languages like Python.
- Strong knowledge in Developing PKI and Traffic routing, gateways and network firewalls
- Experience developing Routers, Gateways and firewall services with secure traffic flow
- Expertise in Zero Trust security principles and a deep understanding of network traffic routing and security
- At least 8+ years’ experience developing cloud services and tools on Oracle Cloud, AWS, GCP, or Azure.
- Systematic problem-solving approach, strong communication skills, a sense of ownership, and drive.
Preferred Qualifications:
- Familiarity with Microservice design patterns and service-to-service communication protocols.
- Experience with Kubernetes and Infrastructure as Code (IAC)
- Familiarity with databases (SQL and noSQL) and host virtualisation technologies (KVM, Containers, Docker, etc.).
- Understanding of service metrics, alarming systems, and operational experience with mission-critical services.
- Knowledge of Linux internals and Unix troubleshooting skills
- Experience working in an operational environment with mission critical tier one services with associated pager duty
Disclaimer:
Certain US customer or client-facing roles may be required to comply with applicable requirements, such as immunisation and occupational health mandates.
Range and benefit information provided in this posting are specific to the United States only
Hiring Range: from $94,200 to $223,500 per annum. May be eligible for bonus and equity.
Oracle maintains broad salary ranges for its roles in order to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect Oracle’s differing products, industries and lines of business.
Candidates are typically placed into the range based on the preceding factors as well as internal peer equity.
Oracle offers a comprehensive benefits package which includes the following:
1. Medical, dental, and vision insurance, including expert medical opinion
2. Short term disability and long-term disability
3. Life insurance and AD&D
4. Supplemental life insurance (Employee/Spouse/Child)
5. Health care and dependent care Flexible Spending Accounts
6. Pre-tax commuter and parking benefits
7. 401(k) Savings and Investment Plan with company match
8. Paid time off: Flexible Vacation is provided to all eligible employees assigned to a salaried (non-overtime eligible) position. Accrued Vacation is provided to all other employees eligible for vacation benefits. For employees working at least 35 hours per week, the vacation accrual rate is 13 days annually for the first three years of employment and 18 days annually for subsequent years of employment. Vacation accrual is prorated for employees working between 20 and 34 hours per week. Employees working fewer than 20 hours per week are not eligible for vacation.
9. 11 paid holidays
10. Paid sick leave: 72 hours of paid sick leave upon date of hire. Refreshes each calendar year. Unused balance will carry over each year up to a maximum cap of 112 hours.
11. Paid parental leave
12. Adoption assistance
13. Employee Stock Purchase Plan
14. Financial planning and group legal
15. Voluntary benefits including auto homeowner and pet insurance
QualificationsDisclaimer:
Certain US customer or client-facing roles may be required to comply with applicable requirements, such as immunization and occupational health mandates.Range and benefit information provided in this posting are specific to the stated locations onlyUS: Hiring Range: from $94,200 to $223,500 per annum. May be eligible for bonus and equity.
Oracle maintains broad salary ranges for its roles in order to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect Oracle’s differing products, industries and lines of business.
Candidates are typically placed into the range based on the preceding factors as well as internal peer equity.
Oracle US offers a comprehensive benefits package which includes the following:
1. Medical, dental, and vision insurance, including expert medical opinion
2. Short term disability and long term disability
3. Life insurance and AD&D
4. Supplemental life insurance (Employee/Spouse/Child)
5. Health care and dependent care Flexible Spending Accounts
6. Pre-tax commuter and parking benefits
7. 401(k) Savings and Investment Plan with company match
8. Paid time off: Flexible Vacation is provided to all eligible employees assigned to a salaried (non-overtime eligible) position. Accrued Vacation is provided to all other employees eligible for vacation benefits. For employees working at least 35 hours per week, the vacation accrual rate is 13 days annually for the first three years of employment and 18 days annually for subsequent years of employment. Vacation accrual is prorated for employees working between 20 and 34 hours per week. Employees working fewer than 20 hours per week are not eligible for vacation.
9. 11 paid holidays
10. Paid sick leave: 72 hours of paid sick leave upon date of hire. Refreshes each calendar year. Unused balance will carry over each year up to a maximum cap of 112 hours.
11. Paid parental leave
12. Adoption assistance
13. Employee Stock Purchase Plan
14. Financial planning and group legal
15. Voluntary benefits including auto, homeowner and pet insurance
The role will generally accept applications for at least three calendar days from the posting date or as long as the job remains posted.
