Principal Security Architect

Key Responsibilities

Security Design Evaluation:

-Evaluates existing security architectures independently to identify and prioritize security design issues and weaknesses.

-Provides in-depth technical advice to support the design and development of secure architectures.

-Identifies gaps and weaknesses in proposed designs of new projects and features and develops complex compensating controls.

-Facilitates architecture discussions and security assessments related to the security design review process and threat modeling.

Security Solutions Design:

-Designs, supports, and/or assesses reviews of complex security solutions for product services and infrastructure both on-premise and cloud.

-Designs systems for implementing security controls and monitoring the security of networks, systems, and applications, ensuring functional goals within the team are achieved.

-Works closely with internal teams (e.g., developers, Product Management, IT, Operations) to develop products that provide in-depth security insights.

Security Solutions Research:

-Conducts standard security research regarding threats, investigates moderately complex issues, and oversees upgrades on security platforms, ensuring the highest levels of system integrity and protection.

-Collaborates closely with internal and external stakeholders (e.g., Oracle Cloud Infrastructure) to refine functional requirements and identify functional gaps in security solutions.

Security Standards and Practice:

-Supports the build or review of security policies, standards, and/or patterns for data security issues and compliance, while also providing guidance on privacy requirements.

-Incorporates regulatory requirements, compliance standards, and threat models to tune implementations and standards for a complex application landscape.

-Develops and updates existing security standards and programming practices for internal service development and service security operational processes.

-Reviews security operations guides for hand-off to the support team for post-launch support.

Identity and Access Management:

-Participates in and architects the generation of Managed Identity and Access Management services and pre-sales activities, providing guidance for resolution of customer-reported issues.

Core Responsibilities

Planning & Execution:

-Manages and coordinates moderately complex tasks, monitoring timelines and deliverables to ensure timely completion and adherence to requirements for a moderately sized project or initiative.

-Efficiently delegates, monitors, and prioritizes work across multiple projects, providing technical oversight and adjusting plans to address shifts in resources or timelines.

Collaboration & Partnership:

-Collaborates across the organization to align on expectations and achieve shared objectives.

-Leverages understanding of business leaders, stakeholders, and/or customers to ensure proposed solutions meet their needs.

-Supports inclusivity by actively seeking and listening to diverse perspectives, ensuring others feel heard and respected.

Problem Solving:

-Identifies and addresses moderately complex issues by analyzing a wide range of data and/or information to identify solutions in accordance with standard practices.

-Proactively escalates unresolved or critical issues with a thorough assessment and suggests potential solutions.

-Reviews, contributes to, and documents problem-solving strategies.

Continuous Learning:

-Pursues learning opportunities to expand knowledge and skills and/or tools in new areas and stays abreast of the latest industry trends and best practices.

-Proactively seeks and leverages ongoing feedback and training to improve skills.

-Coaches and mentors junior team members, fostering continuous learning and knowledge sharing within and across teams.

Continuous Improvement:

-Develops ideas, recommends updates, and/or collaborates on the implementation of process improvements to increase the efficiency and effectiveness of processes, protocols, and workflows across teams, and evaluates the impact on key stakeholders.

-Solicits feedback from others on ideas for alternative approaches and methods for continued improvement.

Performance and Development:

-Contributes to the talent development pipeline by participating in candidate interviews, assessing candidates, and providing hiring recommendations.