Principal Security Architect

Evaluates existing security architectures independently to identify and prioritize security design issues and weaknesses. Designs, supports, and/or assesses reviews of complex security solutions for product services and infrastructure both on-premise and cloud. Conducts standard security research regarding threats, investigates moderately complex issues, and oversees upgrades on security platforms, ensuring the highest levels of system integrity and protection. Supports the build or review of security policies, standards, and/or patterns for data security issues and compliance, while also providing guidance on privacy requirements. Participates in and architects the generation of Managed Identity and Access Management (IAM) services and pre-sales activities, providing guidance for resolution of customer-reported issues.

Key

Security

Design Evaluation:

–

Evaluates

existing security architectures independently to identify and prioritize

security design issues and weaknesses.

–

Provides

in-depth technical advice to support the design and development of secure

architectures.

–

Identifies

gaps and weaknesses in proposed designs of new projects and features and

develops complex compensating controls.

–

Facilitates

architecture discussions and security assessments related to the security

design review process and threat modeling.

Security

Solutions Design:

–

Designs,

supports, and/or assesses reviews of complex security solutions for product

services and infrastructure both on-premise and cloud.

–

Designs

systems for implementing security controls and monitoring the security of

networks, systems, and applications, ensuring functional goals within the team

are achieved.

–

Works

closely with internal teams (e.g., developers, Product Management, IT,

Operations) to develop products that provide in-depth security insights.

Security

Solutions Research:

–

Conducts

standard security research regarding threats, investigates moderately complex

issues, and oversees upgrades on security platforms, ensuring the highest

levels of system integrity and protection.

–

Collaborates

closely with internal and external stakeholders (e.g., Oracle Cloud

Infrastructure) to refine functional requirements and identify functional gaps

in security solutions.

Security

Standards and Practice:

–

Supports

the build or review of security policies, standards, and/or patterns for data

security issues and compliance, while also providing guidance on privacy

requirements.

–

Incorporates

regulatory requirements, compliance standards, and threat models to tune

implementations and standards for a complex application landscape.

–

Develops

and updates existing security standards and programming practices for internal

service development and service security operational processes.

–

Reviews

security operations guides for hand-off to the support team for post-launch

support.

Identity

and Access Management:

–

Participates

in and architects the generation of Managed Identity and Access Management

services and pre-sales activities, providing guidance for resolution of

customer-reported issues.

Core

Planning

& Execution:

–

Manages

and coordinates moderately complex tasks, monitoring timelines and deliverables

to ensure timely completion and adherence to requirements for a moderately

sized project or initiative.

–

Efficiently

delegates, monitors, and prioritizes work across multiple projects, providing

technical oversight and adjusting plans to address shifts in resources or

timelines.

Collaboration

& Partnership:

–

Collaborates

across the organization to align on expectations and achieve shared objectives.

–

Leverages

understanding of business leaders, stakeholders, and/or customers to ensure

proposed solutions meet their needs.

–

Supports

inclusivity by actively seeking and listening to diverse perspectives, ensuring

others feel heard and respected.

Problem

Solving:

–

Identifies

and addresses moderately complex issues by analyzing a wide range of data

and/or information to identify solutions in accordance with standard practices.

–

Proactively

escalates unresolved or critical issues with a thorough assessment and suggests

potential solutions.

–

Reviews,

contributes to, and documents problem-solving strategies.

Continuous

Learning:

–

Pursues

learning opportunities to expand knowledge and skills and/or tools in new areas

and stays abreast of the latest industry trends and best practices.

–

Proactively

seeks and leverages ongoing feedback and training to improve skills.

–

Coaches

and mentors junior team members, fostering continuous learning and knowledge

sharing within and across teams.

Continuous

Improvement:

–

Develops

ideas, recommends updates, and/or collaborates on the implementation of process

improvements to increase the efficiency and effectiveness of processes,

protocols, and workflows across teams, and evaluates the impact on key

stakeholders.

–

Solicits

feedback from others on ideas for alternative approaches and methods for

continued improvement.

Performance

and Development:

–

Contributes

to the talent development pipeline by participating in candidate interviews,

assessing candidates, and providing hiring recommendations.