Security Architect

About the Job

We are looking for a hands-on Senior Security Architect / Lead Engineer to own security and compliance across our cloud database platform services. You will drive the security strategy for Oracle Databases, Oracle Cloud Infrastructure (OCI), and PostgreSQL environments, ensuring they meet regulatory and internal standards.

As the technical lead of a dedicated security squad, you will balance deep engineering work with people leadership, mentoring engineers and collaborating with architects, operations, and governance stakeholders across the organization.

You will design controls, respond to audit findings and continuously raise the security posture of our data infrastructure, all while helping the team grow and operate with autonomy.

What you do

• Security Architecture Design: Design and implement end-to-end security architectures for Oracle Databases (in OCI) and PostgreSQL deployments, addressing encryption (data-at-rest and data-in-transit), key management, privilege separation, and OS/DB hardening.
• Network Security Controls: Define and maintain network security controls aligned with Zero Trust Architecture (ZTA) principles, including firewall rule sets, private endpoint configurations, VCN/subnet segmentation in OCI and certificate lifecycle management (PKI, certificate authorities, rotation automation).
• Threat Modeling and Vulnerability Management: Lead threat-modelling sessions for new platform capabilities, translate findings into actionable engineering controls, and establish vulnerability management for the entire database stack.
• Integration with Microsoft Entra ID: Own the technical integration of Microsoft Entra ID with database access patterns, including OAuth 2.0/OIDC flows, managed identities, Conditional Access, and Privileged Identity Management (PIM) for database roles.
• Compliance and Framework Alignment: Maintain and improve alignment with security and compliance frameworks such as CIS Benchmarks, ISO 27001/27017/27018, SOC 2 Type II, GDPR/DSGVO, and DORA, while acting as the primary contact for database-security-related audit requests and remediation plans.
• Documentation and Leadership: Develop and maintain security control documentation, runbooks, and policy artifacts for the database platform, while leading a cross-functional squad responsible for database security and compliance, fostering a culture of ownership and continuous learning.
• Incident Management and Reporting: Serve as an escalation point and technical decision-maker for database security incidents, manage squad capacity and sprint objectives and report regularly on risk postures and compliance status.