Key skills

Oracle Cloud Infrastructure (OCI) SecurityOCI Identity and Access Management (IAM)TerraformOCI Resource ManagerAnsibleSIEM Integration SplunkSIEM Integration ElasticSIEM IntegrationSIEM Integration Microsoft SentinelOCI Security Services Cloud GuardOCI Security Services Security ZonesOCI Security Services Security AdvisorOCI Security ServicesOCI Security Services Threat IntelligenceEncryption Key ManagementOCI CertificationFedRAMP, HIPAA, NIST 800-53, and CIS BenchmarksKubernetes and OKE Container SecurityAWSAzureGCPKubernetesIAMAPI GatewayOracleSplunkLoad BalancingSaaSNetwork SecurityCloud SecurityWAF

About this role

Latitude is a growing Service-Disabled Veteran Owned company serving federal-sector clients. The OCI Cloud Security Engineer will implement, validate, and operate Oracle Cloud Infrastructure security controls for a federal health customer, including IAM, encryption, monitoring, logging, and Infrastructure as Code automation.

Responsibilities:

Implement and validate OCI security posture across IAM policies, network security groups, data encryption, and monitoring
Design, build, test, and take live OCI-native security controls, including Cloud Guard, Security Zones, Security Advisor, and Threat Intelligence
Build key management for encryption at rest across OCI storage, databases, and SaaS data, including key rotation, versioning, and lifecycle policies
Integrate OCI logs and events into the enterprise SIEM and tune them for useful detection
Automate security controls with Infrastructure as Code and help set technical standards for cloud and on-premises environments

Requirements:

Bachelor's degree in computer science, engineering, or a related technical field, or equivalent experience, and 6+ years of experience in cloud security engineering, solution engineering, enterprise architecture, or related technical roles
Advanced, hands-on proficiency with OCI security tools and OCI IAM
Proficiency with Infrastructure as Code using Terraform (preferred), OCI Resource Manager, or Ansible
Experience integrating OCI logs and events into a SIEM such as Splunk, Elastic, or Microsoft Sentinel
Solid understanding of how security applies to compute, load balancing, WAF, API Gateway, and Functions
Ability to communicate complex technical concepts clearly to technical and non-technical stakeholders
Ability to obtain and maintain a federal background investigation (Public Trust)
Applicants selected will be subject to a Security Investigation and May need to Meet Requirements for Access to Protected and/or Classified Information
Applicants need to be a US Citizen to be considered for the position and have physically resided in the United States for a minimum of 3 years due to background investigation requirements
Current OCI certification, such as OCI Security Professional or OCI Architect Professional
Active Public Trust
Experience supporting federal government programs, especially federal health
Knowledge of regulated environments: FedRAMP, HIPAA, NIST 800-53, CIS benchmarks
Experience with Oracle Fusion Applications security
Experience with AWS, Azure, or GCP in addition to OCI
Container security for Kubernetes and OKE, including image scanning, and OS-level remediation of vulnerability scan findings