Job Description

The Oracle Cloud Infrastructure (OCI) team can provide you the opportunity to build and operate a suite of massive scale, integrated cloud services in a broadly distributed, multi-tenant cloud environment.  OCI is committed to providing the best in cloud products that meet the needs of our customers who are tackling some of the world’s biggest challenges.

Oracle’s Cloud Infrastructure (OCI) builds Infrastructure-as-a-Service that operates at a high scale in a broadly distributed multi-tenant cloud environment. Our customers run their businesses on our cloud, and our mission is to provide them with best-in-class compute, storage, networking, database, security, and an ever-expanding set of foundational cloud-based services. These are exciting times in our space - we are growing fast and working on ambitious new initiatives.

We are building a new Zero Trust service team at OCI. Our mission is to build and operate a set of Zero Trust Network services through a combination of network security technologies with OpenZiti, identity and access management (IAM) solutions, multi-factor authentication (MFA), software-defined perimeters (SDP), and cloud-based security solutions. The goal is to create a more resilient and secure network that reduces the risk of data breaches and cyberattacks, especially in today's highly dynamic and distributed computing environments.

The secure edge zero trust service will provide policy mapping, edge routers and controllers to perform a user to device to workload mapping for access.  These functions will generate logs, audit trails, metrics, and alerts to enable automated and manual assurance of code as well as ingress/egress traffic. The team will develop and maintain the secure edge code as well as operate the service infrastructure for the application. The team will be responsible for the performance, scalability, and reliability of the service too. In particular, they will be responsible for ensuring that the performance of the application, as well as the developer velocity of the application teams, are not negatively impacted by the zero trust service. They will optimize the code to ensure low overhead and they will scale the secure edge routers, controllers to handle increases in traffic and in the frequencies of application updates.

Responsibilities

As a member of the software engineering division, you will apply expert to advanced knowledge of software architecture to perform software development tasks associated with developing, debugging or designing software applications or operating systems according to provided design specifications. Build enhancements within an existing software architecture and occasionally suggest improvements to the architecture.

The ideal candidate will be technically strong and productive; someone who knows how to balance speed and quality with iterative and incremental improvements. You understand operational excellence and know-how to infuse a culture of being proactive within your team. You have the ability to recommend and justify changes to new and existing products and establish consensus with data-driven approaches.

As a Senior Software Engineer with 6 to 10 years of experience, you will be a key member of the OCI Zero Trust Service team, responsible for designing, developing, and operating a suite of Zero Trust Network services using Open Ziti and related security technologies. You will work closely with a team of software engineers to create a secure edge infrastructure that offers policy mapping, edge routers, and controllers to enable user-to-device-to-workload access mapping. This critical network service aims to enhance security and resilience, reducing the risk of data breaches and cyberattacks in dynamic and distributed cloud environments. Your responsibilities will include:

• Design and Development: Utilize your expertise in software architecture and security principles to design, develop, and enhance the secure edge zero trust services. Implement solutions that enable automated and manual assurance of code, while ensuring optimal performance and low overhead.
• Open Ziti Integration: Leverage your understanding of Zero Trust principles and Open Ziti to implement identity and access management (IAM) solutions, multi-factor authentication (MFA), and software-defined perimeters (SDP) to create a secure and robust network infrastructure.
• Security and Compliance: Apply security best practices to the entire development lifecycle, from design to deployment. Conduct thorough code reviews, vulnerability assessments, and recommend security improvements based on data-driven approaches.
• Cloud Infrastructure and Networking: Have a strong sense of cloud infrastructure and networking knowledge to ensure seamless integration of the zero trust services into the broader OCI environment including VPN, IPSec, DRG, VCNs and transforming corporate network to cloud network
• Performance and Scalability: Optimize the secure edge routers and controllers to handle increasing traffic and application updates, while ensuring the overall performance and reliability of the zero trust network services.
• Collaboration and Agile Environment: Work collaboratively with cross-functional teams in an agile environment, contributing your expertise, providing mentorship, and fostering a culture of proactive problem-solving and continuous learning.
• Monitoring and Operations: Devise, manage, and extend monitoring solutions for large-scale environments. Respond to operational challenges and mission-critical incidents as part of on-call duties.

Job Requirements / Basic Qualifications: To succeed in this role, you should possess the following qualifications and skills:

• Bachelor's degree in Computer Science or a related technical field, or equivalent practical experience. Master's degree preferred.
• 6 to 9 years of experience with back-end development for cloud network services.
• Proficiency in high-level programming languages such as GO and Java, along with scripting languages like Python.
• Strong knowledge of computer networking principles, OSI layers, TCP/IP, DNS, DHCP, Routers, Gateways, and Subnets.
• Expertise in Zero Trust security principles and a deep understanding of Open Ziti framework.
• At least 6+ years experience developing cloud services and tools on Oracle Cloud, AWS, GCP, or Azure.
• Systematic problem-solving approach, strong communication skills, a sense of ownership, and drive.

Preferred Qualifications:

• Familiarity with microservice design patterns and service-to-service communication protocols.
• Experience with Kubernetes and Infrastructure as Code (IAC) languages like Terraform.
• Familiarity with databases (SQL and noSQL) and host virtualization technologies (KVM, Containers, Docker, etc.).
• Understanding of service metrics, alarming systems, and operational experience with mission-critical services.
• Knowledge of Linux internals and Unix troubleshooting skills
• Experience working in an operational environment with mission critical tier one services with associated pager duty