Job ID#:
36971
Title:
OCI Security and Infrastructure Consultant
Duration:
1 year
Start Date:
ASAP
Location:
Remote
W2/C2C:
W2 Only
Job Description:
- Configure and maintain OCI infrastructure components including compute, networking (VCNs, subnets, gateways), storage, and load balancers.
- Design, deploy, and maintain multi?cloud networking (Egress and Workload VCNs, firewall/NAT gateways, AWS transit), enforcing traffic?control policies.
- Implement and manage OCI Identity and Access Management (IAM) policies, compartments, dynamic groups, and federation.
- Harden OCI infrastructure according to CIS Benchmarks and cloud security best practices.
- Apply security patches and manage updates across OCI-hosted applications and services.
- Design and operate an end to end monitoring, alerting, and reliability stack (Datadog, OCI Metrics, PagerDuty) with SLO/SLA tracking and cost optimization.
- Monitor and respond to security alerts and events from OCI tools like Cloud Guard, Logging, and Security Zones.
- Build and maintain an Infrastructure asCode pipeline: Terraform Cloud for resource provisioning, GitHub for source control, GitHub Actions for CI/CD.
- Orchestrate configuration and patch management at scale with Ansible Automation Platform.
- Configure and maintain backup, disaster recovery, and high availability setups within the OCI environment.
- Perform regular reviews of access, entitlements, and audit logs to ensure least privilege and policy compliance.
- Assist with security incident investigations and remediation within the OCI environment.
- Work closely with security and infrastructure teams to enforce secure controls and infrastructure best practices (IaC, etc)
- Collaborate with developers, integration engineers, finance, and security stakeholders to improve reliability and expand OCI capabilities.
- Actively monitor, assess and recommend tactical and strategic initiatives based on new and emerging threats posing risk to cloud computing environments.
- Manage remediation efforts after security assessment findings outline weaknesses requiring attention.
- Provide documentation and knowledge transfer to internal teams.
Required Qualifications:
- Experience working with security tools like teleport, crowdstrike EDR, tenable, SIEM etc
- 5+ years of experience in cybersecurity or related engineering roles.
- 3+ years hands-on experience specifically with Oracle Cloud Infrastructure (OCI).
- Strong understanding of OCI networking, IAM, compartments, security lists, and resource management.
- Experience with OCI-native security services (e.g., Cloud Guard, Security Zones, Logging, Vault).
- Proficiency in infrastructure-as-code tools (Terraform preferred).
- Experience in Ansible Automation Platform or other configuration management tooling.
- Solid understanding of security best practices, including least privilege access, encryption, system hardening, vulnerability management and key management.
- Familiarity with compliance requirements (e.g., ISO 27001, SOC 2, HIPAA) as they apply to OCI.
- Experience supporting production-grade workloads in a cloud environment.
- Scripting knowledge (e.g., Bash, Python) for automation and monitoring.
Preferred Qualifications:
- OCI Certified Architect or OCI Certified Security Professional.
- Prior experience integrating OCI with SIEM tools (e.g., Splunk, QRadar).
- Experience working in hybrid environments (on-prem + OCI).
- Experience with Monitoring and Alert tools (Pref: Datadog)
- Experience with logging pipelines and log manipulation (Pref: Cribl Stream)
- Experience with Github and Github Actions CI/CD and DevSecOps processes and tooling.
- Experience with AWS Networking and multi-cloud connectivity is a bonus.
DeWinter Group and Maris Consulting is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. We post pay scales which are based on our client pay ranges. DeWinter, Maris, and our clients have the right to modify the requirements of the role which can impact the pay ranges posted.
