OCI IAM Security architect

Note: Need Immediate Joiners.

Security Architecture & Design:

Design and implement comprehensive, end-to-end security frameworks for OCI tenancies, aligned with industry standards including the CIS OCI Foundations Benchmark, NIST Cybersecurity Framework (CSF), and ISO/IEC 27001.

Develop multi-layered security architectures encompassing perimeter, network, workload, data, and identity security domains.

Perform cloud security architecture reviews and threat modeling for applications and infrastructure hosted on OCI.

Establish and enforce security baselines, guardrails, and secure landing zones to ensure consistent and compliant deployment across OCI environments.

Evaluate, recommend, and integrate OCI-native and third-party security tools and services to strengthen the overall security posture.

Identity & Access Management (IAM):

Design and deploy scalable OCI IAM solutions, including policies, compartments, groups, dynamic groups, and identity federation via SAML, SCIM, and LDAP.

Enforce the Principle of Least Privilege (PoLP) and Role-Based Access Control (RBAC) across all OCI resources.

Manage OCI Identity Domains, Multi-Factor Authentication (MFA), and integrate Privileged Access Management (PAM) solutions.

Conduct regular access reviews and entitlement certifications to ensure ongoing access governance.

Implement lifecycle management for service accounts and API keys across OCI resources.

Data Security & Encryption:

Architect and implement robust data protection strategies for data at rest and in transit across OCI services.

Manage OCI Vault (Key Management Service) for customer-managed encryption keys (CMEKs), secrets, and digital certificates.

Utilize OCI Data Safe for database security assessments, sensitive data discovery, and data masking.

Configure encryption for OCI Object Storage, Block Volumes, and Oracle Databases.

Define and enforce data classification and handling policies to support compliance and risk mitigation.

Network Security:

Design and deploy network security controls using OCI Network Firewall, Web Application Firewall (WAF), Security Lists, and Network Security Groups (NSGs).

Implement DDoS protection, rate limiting, and traffic scrubbing for internet-facing workloads.

Apply Zero Trust Network Access (ZTNA) principles to secure access to internal resources.

Monitor and analyze VCN Flow Logs, firewall logs, and WAF logs to detect and respond to threats.

Conduct network security assessments and coordinate penetration testing activities.

Threat Detection, Monitoring & Incident Response:

Implement and manage OCI Cloud Guard for continuous security posture monitoring, threat detection, and automated remediation.

Configure Security Zones and Security Advisor to enforce security policies at the compartment level.

Integrate OCI Logging, OCI Logging Analytics, and OCI Events with SIEM platforms (e.g., Splunk, IBM QRadar, Microsoft Sentinel) for centralized visibility.

Lead security incident response efforts, including investigation, containment, eradication, and recovery.

Develop and maintain incident response plans, playbooks, and runbooks tailored to OCI environments.

Conduct proactive threat hunting and ongoing vulnerability management.

Vulnerability Management & Compliance:

Perform regular security assessments, vulnerability scans, and CIS benchmark compliance checks across OCI environments.

Track and manage remediation of vulnerabilities across workloads and infrastructure.

Ensure adherence to regulatory requirements such as PCI-DSS, HIPAA, GDPR, SOC 2, and ISO 27001.

Leverage OCI Compliance Documents and collect audit evidence to support certification processes.

Implement OCI Audit Service to enable comprehensive...

Note: Need Immediate Joiners.