Oracle
Job Description
Oracle Cloud Infrastructure (OCI) is seeking a Principal Network Security Engineer to lead the architecture, delivery, and operational excellence of Tier 0 DDoS protection and network security services. You will own strategy and roadmap, drive cross‑org initiatives, and set engineering standards for secure, highly available, and globally scalable defenses. This role blends deep technical leadership, hands‑on execution, and mentorship to raise the bar on reliability, performance, and security.
Responsibilities
Own end‑to‑end architecture and roadmap for DDoS mitigation and network security services; make design choices that scale globally.
Lead delivery of high‑impact programs: capacity planning, traffic engineering, telemetry, and automation for detection and mitigation.
Establish SLOs/SLAs, KPIs, and operational readiness standards; drive continuous improvement and compliance.
Serve as incident commander for complex events; lead post‑incident reviews and systemic remediations.
Design and review production‑ready code, automation, and tooling (Python; Go preferred) for reliability at scale.
Guide security reviews, threat modeling, and risk mitigations; ensure auditability and policy adherence.
Partner with networking, edge, SRE, and product teams to integrate controls and deliver customer‑facing capabilities.
Mentor and develop engineers; influence hiring, technical direction, and best practices across the org.
Evaluate emerging technologies (e.g., advanced telemetry, programmable data planes) and lead adoption where it adds value.
Produce clear design docs, runbooks, and executive updates.
Qualifications
6–10 years in network/security engineering at cloud, hyperscale, or ISP, including ownership of production‑critical systems.
Expert knowledge of routing and protocols: BGP, TCP/IP, IPv4/IPv6; strong DNS/DHCP fundamentals; MPLS familiarity.
Proven, hands‑on experience designing and operating large‑scale DDoS detection/mitigation and traffic/telemetry systems.
Strong software/automation skills (Python; Go preferred), CI/CD, Infrastructure‑as‑Code, and testing in production environments.
Demonstrated leadership in incident response, resilience engineering, and post‑mortem‑driven improvements.
Excellence in system design, performance characterization, and security reviews/threat modeling.
Clear communicator with the ability to influence across orgs and present to executives.
Preferred Qualifications
Experience with SDN, programmable data planes, eBPF, or hardware‑based mitigation platforms.
Background in capacity planning, anycast/traffic steering, and large‑scale observability.
Familiarity with zero trust, segmentation, and modern security architectures.
Relevant certifications or equivalent industry recognition.
Impact
Protect and improve OCI’s Tier 0 availability and security posture.
Accelerate delivery of customer‑facing DDoS capabilities and platform resiliency.
Uplevel engineering quality, operational maturity, and compliance readiness.
Benefits
Medical, dental, and vision insurance.
Short‑term and long‑term disability.
Life insurance and AD&D.
Supplemental life insurance (Employee/Spouse/Child).
Health care and dependent care Flexible Spending Accounts.
Pre‑tax commuter and parking benefits.
401(k) savings and investment plan with company match.
Paid time off, holidays, sick leave, parental leave, adoption assistance.
Employee stock purchase plan and financial planning.
Voluntary benefits including auto, homeowner, and pet insurance.
Disclaimer Certain US customer or client‑facing roles may be required to comply with applicable requirements, such as immunization and occupational health mandates. Benefits and salary information are provided in Oracle’s career postings and vary by location and role. The role will generally accept applications for at least three calendar days from the posting date or as long as the job remains posted.
Equal Employment Opportunity Oracle is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability, and protected veterans’ status, or any other characteristic protected by law. Oracle will consider for employment qualified applicants with arrest and conviction records pursuant to applicable law.
#J-18808-Ljbffr
Responsibilities
Own end‑to‑end architecture and roadmap for DDoS mitigation and network security services; make design choices that scale globally.
Lead delivery of high‑impact programs: capacity planning, traffic engineering, telemetry, and automation for detection and mitigation.
Establish SLOs/SLAs, KPIs, and operational readiness standards; drive continuous improvement and compliance.
Serve as incident commander for complex events; lead post‑incident reviews and systemic remediations.
Design and review production‑ready code, automation, and tooling (Python; Go preferred) for reliability at scale.
Guide security reviews, threat modeling, and risk mitigations; ensure auditability and policy adherence.
Partner with networking, edge, SRE, and product teams to integrate controls and deliver customer‑facing capabilities.
Mentor and develop engineers; influence hiring, technical direction, and best practices across the org.
Evaluate emerging technologies (e.g., advanced telemetry, programmable data planes) and lead adoption where it adds value.
Produce clear design docs, runbooks, and executive updates.
Qualifications
6–10 years in network/security engineering at cloud, hyperscale, or ISP, including ownership of production‑critical systems.
Expert knowledge of routing and protocols: BGP, TCP/IP, IPv4/IPv6; strong DNS/DHCP fundamentals; MPLS familiarity.
Proven, hands‑on experience designing and operating large‑scale DDoS detection/mitigation and traffic/telemetry systems.
Strong software/automation skills (Python; Go preferred), CI/CD, Infrastructure‑as‑Code, and testing in production environments.
Demonstrated leadership in incident response, resilience engineering, and post‑mortem‑driven improvements.
Excellence in system design, performance characterization, and security reviews/threat modeling.
Clear communicator with the ability to influence across orgs and present to executives.
Preferred Qualifications
Experience with SDN, programmable data planes, eBPF, or hardware‑based mitigation platforms.
Background in capacity planning, anycast/traffic steering, and large‑scale observability.
Familiarity with zero trust, segmentation, and modern security architectures.
Relevant certifications or equivalent industry recognition.
Impact
Protect and improve OCI’s Tier 0 availability and security posture.
Accelerate delivery of customer‑facing DDoS capabilities and platform resiliency.
Uplevel engineering quality, operational maturity, and compliance readiness.
Benefits
Medical, dental, and vision insurance.
Short‑term and long‑term disability.
Life insurance and AD&D.
Supplemental life insurance (Employee/Spouse/Child).
Health care and dependent care Flexible Spending Accounts.
Pre‑tax commuter and parking benefits.
401(k) savings and investment plan with company match.
Paid time off, holidays, sick leave, parental leave, adoption assistance.
Employee stock purchase plan and financial planning.
Voluntary benefits including auto, homeowner, and pet insurance.
Disclaimer Certain US customer or client‑facing roles may be required to comply with applicable requirements, such as immunization and occupational health mandates. Benefits and salary information are provided in Oracle’s career postings and vary by location and role. The role will generally accept applications for at least three calendar days from the posting date or as long as the job remains posted.
Equal Employment Opportunity Oracle is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability, and protected veterans’ status, or any other characteristic protected by law. Oracle will consider for employment qualified applicants with arrest and conviction records pursuant to applicable law.
#J-18808-Ljbffr