Principal Security Architect

Key
Responsibilities

Security
Design Evaluation:

–        
Evaluates
existing security architectures independently to identify and prioritize
security design issues and weaknesses.

–        
Provides
in-depth technical advice to support the design and development of secure
architectures.

–        
Identifies
gaps and weaknesses in proposed designs of new projects and features and
develops complex compensating controls.

–        
Facilitates
architecture discussions and security assessments related to the security
design review process and threat modeling.

Security
Solutions Design:

–        
Designs,
supports, and/or assesses reviews of complex security solutions for product
services and infrastructure both on-premise and cloud.

–        
Designs
systems for implementing security controls and monitoring the security of
networks, systems, and applications, ensuring functional goals within the team
are achieved.

–        
Works
closely with internal teams (e.g., developers, Product Management, IT,
Operations) to develop products that provide in-depth security insights.

Security
Solutions Research:

–        
Conducts
standard security research regarding threats, investigates moderately complex
issues, and oversees upgrades on security platforms, ensuring the highest
levels of system integrity and protection.

–        
Collaborates
closely with internal and external stakeholders (e.g., Oracle Cloud
Infrastructure) to refine functional requirements and identify functional gaps
in security solutions.

Security
Standards and Practice:

–        
Supports
the build or review of security policies, standards, and/or patterns for data
security issues and compliance, while also providing guidance on privacy
requirements.

–        
Incorporates
regulatory requirements, compliance standards, and threat models to tune
implementations and standards for a complex application landscape.

–        
Develops
and updates existing security standards and programming practices for internal
service development and service security operational processes.

–        
Reviews
security operations guides for hand-off to the support team for post-launch
support.

Identity
and Access Management:

–        
Participates
in and architects the generation of Managed Identity and Access Management
services and pre-sales activities, providing guidance for resolution of
customer-reported issues.

Core
Responsibilities

Planning
& Execution:

–        
Manages
and coordinates moderately complex tasks, monitoring timelines and deliverables
to ensure timely completion and adherence to requirements for a moderately
sized project or initiative.

–        
Efficiently
delegates, monitors, and prioritizes work across multiple projects, providing
technical oversight and adjusting plans to address shifts in resources or
timelines.

Collaboration
& Partnership:

–        
Collaborates
across the organization to align on expectations and achieve shared objectives.

–        
Leverages
understanding of business leaders, stakeholders, and/or customers to ensure
proposed solutions meet their needs.

–        
Supports
inclusivity by actively seeking and listening to diverse perspectives, ensuring
others feel heard and respected.

Problem
Solving:

–        
Identifies
and addresses moderately complex issues by analyzing a wide range of data
and/or information to identify solutions in accordance with standard practices.

–        
Proactively
escalates unresolved or critical issues with a thorough assessment and suggests
potential solutions.

–        
Reviews,
contributes to, and documents problem-solving strategies.

Continuous
Learning:

–        
Pursues
learning opportunities to expand knowledge and skills and/or tools in new areas
and stays abreast of the latest industry trends and best practices.

–        
Proactively
seeks and leverages ongoing feedback and training to improve skills.

–        
Coaches
and mentors junior team members, fostering continuous learning and knowledge
sharing within and across teams.

Continuous
Improvement:

–        
Develops
ideas, recommends updates, and/or collaborates on the implementation of process
improvements to increase the efficiency and effectiveness of processes,
protocols, and workflows across teams, and evaluates the impact on key
stakeholders.

–        
Solicits
feedback from others on ideas for alternative approaches and methods for
continued improvement.

Performance
and Development:

–        
Contributes
to the talent development pipeline by participating in candidate interviews,
assessing candidates, and providing hiring recommendations.