Job Description
About The Role
You will join Accenture's Oracle Security Delivery team as a senior OCI security specialist, working across live Oracle Cloud Security programs for enterprise clients in the region. This is a deep technical role — you will be architecting and implementing end-to-end security across OCI environments, from Landing Zone design through to encryption, identity, network controls, and continuous compliance.
If you live and breathe OCI security and want to work on complex, real-world programs where your expertise directly shapes outcomes, this is the role.
What You'll Do
Cloud Security & Threat Protection
Design, build, test, and deploy OCI native security controls including Cloud Guard, Security Zones, Security Advisors, and Threat Intelligence
Define and enforce Cloud Security Posture Management (CSPM) practices — baseline assessments, drift detection, CIS OCI Benchmark alignment, and continuous compliance reporting
Integrate Cloud Guard with SIEM platforms such as Microsoft Sentinel or Splunk via OCI Streaming and Events
Encryption & Key Management
Architect and implement OCI Key Management Service (KMS) — covering Master Encryption Keys, Data Encryption Keys, key rotation, versioning, and lifecycle management across OCI storage, databases, and SaaS data
Design and deploy OCI Hardware Security Module (HSM / Dedicated KMS) for FIPS 140-2 Level 3 compliant environments, including cluster provisioning, client configuration, and service integration
Configure OCI Vault for centralized secrets management — database passwords, API keys, tokens, and certificates — with automated rotation, versioning, and audit trails
Identity & Access
Design and implement OCI IAM controls including Identity Domains, compartment structures, IAM policies, and dynamic groups
Implement OCI Security Zone policies to enforce mandatory guardrails across compartments
Network Security
Architect OCI network security including VCN design, Security Lists, Network Security Groups, OCI Firewall, and DRG-based hub-and-spoke topology to enforce traffic segmentation and zero-trust access
Application & API Security
Configure OCI Web Application Firewall (WAF) — protection rules, bot management, rate limiting, geo-blocking, and custom rules — tuned for Oracle Fusion SaaS and public-facing applications
Implement OCI API Gateway security including JWT and OAuth 2.0 authentication, authorization rules, rate limiting, and WAF integration for backend APIs and Oracle Integration Cloud endpoints
Manage OCI Certificate Service for full certificate lifecycle — CA creation, issuance, renewal automation, revocation, and integration with Load Balancers and API Gateways
Logging, Monitoring & Vulnerability Management
Configure OCI Audit Service, Logging, and Log Analytics for centralized capture, retention, and analysis of security events
Implement OCI Vulnerability Scanning Service for continuous assessment of compute instances and container images, integrated with Cloud Guard for automated remediation tracking
Essential
6+ years of hands-on OCI security engineering experience across large enterprise tenancies
Proven implementation experience across Cloud Guard, KMS, HSM, Vault, WAF, and OCI IAM
Strong command of OCI Landing Zone security design and delivery
Advanced proficiency in OCI IAM — this is non-negotiable
Ability to own delivery outcomes and operate independently on complex programs
Preferred
OCI Security Professional (1Z0-1104) or OCI Architect Professional certification
Experience with Oracle Fusion Applications security
Prior project exposure in the UAE or GCC
Familiarity with FIPS 140-2, CIS Benchmarks, and regional compliance requirements
