Cloud Security Engineer – Oracle

Bright Vision Technologies•Alpharetta, GA

2d•$100,000 - $150,000•Remote

About The Position

Bright Vision Technologies is seeking an experienced Cloud Security Engineer responsible for designing, implementing, and operating security controls across Oracle Cloud Infrastructure (OCI), Oracle Cloud Applications, and hybrid Oracle environments. This is a full-time, direct W2 position that is 100% remote within the United States. The salary range is $100,000–$150,000 annually. Candidates must have at least 6 years of experience as stated in the position overview; the qualifications section specifies 5+ years of cloud security experience with strong hands-on OCI experience. The engineer will design and operate OCI security architectures and controls, support compliance and vulnerability management, and lead security reviews and incident response. The role also develops security automation, maintains detailed technical documentation, and provides guidance and mentorship to application and infrastructure teams. Bright Vision Technologies is an Equal Opportunity Employer and prohibits workplace harassment and discrimination.

Requirements

At least 5 years of cloud security experience, with strong hands-on experience with OCI; the position overview states 6+ years of experience required.
Deep experience with OCI Identity, IAM policies, and identity federation.
Hands-on experience with OCI Cloud Guard, Security Zones, Vault, and Data Safe.
Solid understanding of cloud-native security frameworks and CIS benchmarks.
Experience with vulnerability management and patching tooling.
Working knowledge of regulatory frameworks including PCI-DSS, HIPAA, SOC 2, and ISO 27001.
Strong scripting skills in Python and Bash, and experience with Terraform.
Experience integrating cloud workloads with SIEM platforms.

Nice To Haves

Oracle Cloud Security Professional certification.
CISSP, CCSP, or equivalent industry security certifications.
Experience with multi-cloud security architectures.
Familiarity with SOAR platforms and automated incident response.
Exposure to zero-trust architecture patterns.

Responsibilities

Design and implement enterprise security architectures for OCI tenancies, including landing-zone guardrails, security zones, and compartment policies.
Configure and operate OCI Identity Domains, federation with corporate identity providers, and role-based access control strategies.
Implement key management and secrets handling with OCI Vault, including key rotation and HSM integration where appropriate.
Harden OCI compute, networking, and database workloads using CIS benchmarks, OCI Security Zones, and internal security standards.
Operate OCI Cloud Guard for continuous detection and response, tune detectors, and remediate findings.
Configure and operate OCI Logging and OCI Audit, and integrate them with SIEM platforms for centralized monitoring and forensics.
Implement data security controls using OCI Data Safe, including data masking, sensitive data discovery, and privileged user analysis.
Lead vulnerability management programs, including image scanning, patching, and remediation tracking.
Drive compliance with regulatory frameworks such as PCI-DSS, HIPAA, SOC 2, ISO 27001, or FedRAMP.
Conduct threat modeling and architecture reviews for new OCI workloads.
Lead OCI security incident response, including containment, investigation, and post-incident review.
Develop security automation tooling using Python, Terraform, and OCI CLI/SDK.
Maintain current technical documentation, including architecture diagrams, design decisions, configuration references, runbooks, and operational procedures.
Provide mentorship and security guidance across application and infrastructure teams.