OCI Security

Role & responsibilities

Security Architecture & Design: - Architect and implement end-to-end security frameworks for OCI tenancies aligned with CIS OCI Foundations Benchmark, NIST CSF, and ISO 27001. - Design multi-layer security architectures including perimeter security, network security, workload security, data security, and identity security. - Conduct cloud security architecture reviews and threat modeling for OCI-hosted applications and infrastructure. - Define and enforce security baselines, guardrails, and security landing zones for OCI environments. - Evaluate and recommend OCI-native and third-party security tools and services. Identity & Access Management (IAM): - Design and implement OCI IAM policies, Compartments, Groups, Dynamic Groups, and Federation (SAML, SCIM, LDAP) for enterprise-grade access governance. - Implement Principle of Least Privilege (PoLP) and Role-Based Access Control (RBAC) across OCI resources. - Manage OCI Identity Domains, Multi-Factor Authentication (MFA), and Privileged Access Management (PAM) integrations. - Conduct periodic IAM access reviews and entitlement certifications. - Implement service account and API key lifecycle management for OCI resources. Data Security & Encryption: - Design and implement data encryption strategies for data at rest and data in transit across OCI services. - Manage OCI Vault (Key Management Service) for customer-managed encryption keys (CMEKs), secrets, and certificates. - Implement OCI Data Safe for Oracle Database security assessment, data masking, and sensitive data discovery. - Configure and manage OCI Object Storage encryption, Block Volume encryption, and Database encryption. - Define and enforce data classification and data handling policies on OCI. Network Security: - Design and implement network security controls using OCI Network Firewall, Web Application Firewall (WAF), Security Lists, and Network Security Groups (NSGs). - Configure OCI DDoS protection, rate limiting, and traffic scrubbing for internet-facing workloads. - Implement Zero Trust Network Access (ZTNA) principles on OCI. - Monitor and analyze VCN Flow Logs, Firewall logs, and WAF logs for threat detection. - Conduct network security assessments and penetration testing coordination. Threat Detection, Monitoring & Incident Response: - Implement and manage OCI Cloud Guard for continuous security posture monitoring, threat detection, and automated remediation. - Configure OCI Security Zones and Security Advisor to enforce security policies at the compartment level. - Integrate OCI Logging, OCI Logging Analytics, and OCI Events with SIEM platforms (Splunk, IBM QRadar, Microsoft Sentinel) for centralized security monitoring. - Define and respond to security incidents including investigation, containment, eradication, and recovery. - Develop and maintain Incident Response (IR) plans, playbooks, and runbooks for OCI environments. - Conduct regular threat hunting and vulnerability management activities. Vulnerability Management & Compliance: - Conduct security assessments, vulnerability scans, and CIS benchmark compliance checks across OCI environments. - Manage and track remediation of vulnerabilities identified in OCI workloads and infrastructure. - Ensure compliance with regulatory standards including PCI-DSS, HIPAA, GDPR, SOC 2, and ISO 27001 on OCI. - Leverage OCI Compliance Documents and perform audit evidence collection for security certifications. - Implement and manage OCI Audit Service for comprehensive activity logging and forensic readiness. DevSecOps & Automation: - Embed security controls into CI/CD pipelines (shift-left security) including SAST, DAST, SCA, and container image scanning. - Automate security policy enforcement and compliance checks using Terraform, OCI CLI, and custom Python/Bash scripts. - Implement OCI Functions for automated security response and remediation. - Develop security-as-code policies using OPA (Open Policy Agent) or equivalent frameworks. - Manage secure configuration baselines using Ansible and OCI OS Management Service. Collaboration & Stakeholder Engagement: - Provide security advisory and consultation to project teams during design and implementation phases. - Conduct security awareness sessions and training for cloud operations and development teams. - Engage with Oracle security teams, third-party auditors, and regulatory bodies as required. - Mentor junior security engineers and contribute to security capability building within the organization. - Prepare security reports, dashboards, and executive summaries for leadership and clients.