Senior Security Operations Manager

Oracle•Nashville, TN

About The Position

The role supports enterprise Public Key Infrastructure (PKI) operations in a large, complex, tightly controlled environment. Its primary focus is reliable daily operations, clear documentation, and automation of repeatable tasks. The individual contributor independently manages routine operations, leads incident resolution, and works with infrastructure, application, security, and customer support teams, sharing knowledge and ownership of operational outcomes. The position operates and maintains PKI services, including Microsoft Active Directory Certificate Services (AD CS), Keyfactor, certificate authorities, and hardware security modules (HSMs). It supports certificate lifecycle management, cryptographic key management, platform maintenance, and disaster recovery. The role follows business hours and requires on-site data center visits, scheduled maintenance participation, and on-call coverage. After-hours responsibilities may include nights, weekends, and holidays according to the rotation; remote arrangements must accommodate these requirements.

Requirements

At least 8 years of relevant experience in PKI, certificate management, security operations, or infrastructure administration, including hands-on enterprise PKI support.
Experience with Microsoft AD CS, Keyfactor, and HSMs.
Understanding of digital certificates, TLS/mTLS, certificate chains, trust architectures, and cryptographic key management.
Proficiency in PowerShell and experience automating operational tasks through scripts and APIs.
Experience administering and troubleshooting Windows Server environments using Remote Desktop Protocol (RDP).
Ability to independently manage routine operations and lead incident resolution.
Strong operational documentation, troubleshooting, communication, and collaboration skills.
Familiarity with incident management, formal change management, version control, and security controls.
U.S. citizenship and ability to obtain a federal security clearance.
The alternative general qualification pathways are a bachelor's degree in a related field and 4 years of related experience, or a master's degree in a related field and 2 years of related experience; otherwise, 8 years of relevant experience is specified.
Job skills include data analysis; incident management and response; security monitoring, incident detection, and response; vulnerability assessment and remediation planning; awareness of cybersecurity trends; assessment and mitigation of information vulnerabilities; and cloud security.

Nice To Haves

Experience using Python for operational automation.
Experience with DigiCert and additional certificate management platforms.
Experience supporting Linux, network, and cloud infrastructure.
Experience with Oracle Cloud Infrastructure (OCI).
CISSP certification.
Preferred qualifications also include 3 years of scripting or programming experience, 3 years of cloud experience, 3 years of technical writing experience, and information security certifications from respected industry organizations such as SANS, ISC2, IAPP, or ISACA.

Responsibilities

Operate and maintain enterprise PKI services, including Microsoft AD CS, Keyfactor, certificate authorities, and HSMs.
Manage certificate provisioning, deployment support, renewal, revocation, expiration monitoring, and troubleshooting.
Document operational procedures and maintain current runbooks, recovery instructions, and support handoffs.
Automate repeatable operational tasks using PowerShell and APIs.
Lead PKI incident investigation and resolution, perform root cause analysis, and implement corrective actions.
Support cryptographic key management, platform maintenance, and disaster recovery.
Execute changes within established security, testing, approval, and audit controls.
Collaborate across teams to support internal infrastructure, applications, and customers.
Perform required data center visits for infrastructure maintenance, hardware support, and recovery.
Participate in the on-call rotation and scheduled maintenance windows.
Identify, remediate, and document moderately complex security testing and vulnerability assessments.
Monitor and analyze system and network activity and security events, document initial triage, and escalate events to incident management.
Carry out initial security event investigation, triage, and mitigation; collect and preserve data, analyze logs, and perform basic digital media forensic analysis.
Coordinate with teams to triage and fix security issues, implement detections, identify and address root causes, and contribute to innovation.
Monitor security controls for regulatory compliance, prepare audit responses and actions, and provide evidence and technical support to the compliance team.