Principal Security Engineer

Job Description

The Oracle Cloud Infrastructure (OCI) team offers the opportunity to build and operate a suite of massive-scale, integrated cloud services in a broadly distributed, multi‑tenant cloud environment. OCI is committed to providing the best cloud products that meet the needs of customers tackling some of the world’s biggest challenges.

As a Principal Hardware Security Engineer, you will help ensure that the compute hardware used in the Oracle Cloud Infrastructure meets the security bar and complies with our security posture. You will define security requirements for hardware to ensure essential security controls are not precluded, work closely with Oracle, third‑party vendors, and standards organizations to shape the next generation of hardware platform security, and collaborate with OCI’s operations and engineering teams to continuously improve Oracle Cloud’s operational security posture by establishing supply‑chain and operational requirements for managing device security in our cloud infrastructure.

Key Responsibilities

• Definition of security requirements for hardware enabling OCI security posture, aligning business needs and technology trends.
• Provide independent design consulting in area of expertise to implement:
  • requirements specified by the hardware security team
  • features required to achieve security bar
  • operations (provisioning, reuse, decommissioning) inline with security posture
• Hands on:
  • security assessments of compute devices to ensure device meets requirements.
  • adversarial assessments of compute devices to ensure they can’t be compromised.
• Assess risk from findings and threat models and identify proper risk mitigation controls.
• Work across teams to ensure requirements, findings and recommendations are implemented.
• Mentor junior engineers.

Minimum Qualifications

• Bachelor’s degree in Electrical Engineering, Computer Science or related field or equivalent experience.
• 8‑10+ years of experience in hardware security architecture, engineering, validation or planning, or a related area.
• Demonstrated competency in hardware/firmware with a focus on security.
• Competency with computer architecture.
• Subject Matter Expertise in one of the following areas:
  • Root Of Trust (TCG SRTM, DRTM)
  • x86 (Intel, AMD), ARM server platform architecture, UEFI
  • GPU platforms, rackscale systems, clustering
  • Baseboard Management Controllers
  • SmartNICs (DPUs)
  • Storage devices
• Security concepts and standards associated with Attestation (e.g., SPDM) and measurements, cryptography, Secureboot, DICE, etc.
• Ability to work with most common programming languages (C, C++, Java, Python, Ruby, Go, Rust).
• Ability to read and review hardware schematics for security concerns.
• Experience with reversing tools and ability to reverse engineer.

Preferred Qualifications

• Ability to read and understand x86 and/or ARM assembly language.
• Knowledge of vendor‑specific TEE technologies such as Intel SGX.
• Familiarity with common embedded communications interfaces (SPI, I2C, RS232‑style serial).
• Basic knowledge of enterprise and/or datacenter networking architecture.
• Experience operating in a large‑scale DevOps or CI/CD environment.
• Ability to write clear and concise product security requirements.
• Ability to effectively assess risk from findings and threat models and identify proper risk mitigation controls.
• Ability to succeed individually or collaboratively, whether working internally or with external organizations and individuals.
• Experience working effectively in a large and distributed company.
• Excellent organizational, verbal and written communication skills.

Salary Range

US: Hiring Range in USD from: $106,300 - $234,600 per year. May be eligible for bonus, equity, and compensation deferral.

Benefits

• Medical, dental, and vision insurance, including expert medical opinion.
• Short‑term disability and long‑term disability.
• Life insurance and AD&DD.
• Supplemental life insurance (Employee/Spouse/Child).
• Health care and dependent care Flexible Spending Accounts.
• Pre‑tax commuter and parking benefits.
• 401(k) Savings and Investment Plan with company match.
• Paid time off: Flexible Vacation is provided to all eligible employees assigned to a salaried (non‑overtime eligible) position. Accrued Vacation is provided to all other employees eligible for vacation benefits. For employees working at least 35 hours per week, the vacation accrual rate is 13 days annually for the first three years of employment and 18 days annually for subsequent years of employment. Vacation accrual is prorated for employees working between 20 and 34 hours per week. Employees working fewer than 20 hours per week are not eligible for vacation.
• 11 paid holidays.
• Paid sick leave: 72 hours of paid sick leave upon date of hire. Refreshes each calendar year. Unused balance will carry over each year up to a maximum cap of 112 hours.
• Paid parental leave.
• Adoption assistance.
• Employee Stock Purchase Plan.
• Financial planning and group legal.
• Voluntary benefits including auto, homeowner and pet insurance.

Job Acceptance

This role will generally accept applications for at least three calendar days from the posting date or as long as the job remains posted.

Career Level

IC4

Disclaimer

Certain U.S. based or U.S. customer or client-facing roles may be required to comply with applicable requirements, such as immunization/occupational health mandates, and/or drug testing requirements.

Equal Employment Opportunity

Oracle is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability and protected veterans’ status, or any other characteristic protected by law. Oracle will consider for employment qualified applicants with arrest and conviction records pursuant to applicable law.