✨ AI Summary
Oracle's Secret Management and Key Exchange Team is seeking a Senior Principal Software Engineer to design, build, and operate foundational security infrastructure for sensitive credentials, secrets, certificates, and encryption keys. This role involves leading complex backend and distributed-systems work focused on secure identity, secret retrieval, credential rotation, and secure information exchange. The engineer will be responsible for improving key exchange mechanisms, automating secret rotation, building reliable APIs and tooling, and enhancing the availability, scalability, monitoring, and operational safety of security-critical production systems.
Key qualifications include deep experience in designing and operating distributed backend services, strong security engineering judgment, and experience with APIs, automation, and developer-facing infrastructure. The ideal candidate will demonstrate operational excellence in observability, incident response, and reliability engineering, and possess the ability to lead ambiguous technical programs, make sound architecture decisions, influence across teams, and mentor engineers. Experience with threat modeling, security reviews, and production risk reduction for sensitive-data systems is also required.
🎁 Benefits & Perks
Medical, dental, and vision insurance, including expert medical opinion; Short term disability and long term disability; Life insurance and AD&D; Supplemental life insurance (Employee/Spouse/Child); Health care and dependent care Flexible Spending Accounts; Pre-tax commuter and parking benefits; 401(k) Savings and Investment Plan with company match; Flexible Vacation; 11 paid holidays; 72 hours of paid sick leave upon date of hire; Paid parental leave; Adoption assistance; Employee Stock Purchase Plan; Financial planning and group legal; Voluntary benefits including auto, homeowner and pet insurance.
Requirements
The role requires deep experience designing and operating distributed backend services in production at scale, with strong security engineering judgment across various security domains. Candidates must have experience building reliable APIs and automation, demonstrate operational excellence, and possess the ability to lead ambiguous technical programs, make architecture decisions, influence across teams, and mentor engineers. Practical experience with threat modeling and security reviews for sensitive-data systems is also essential.
Description
Responsibilities
-
Design and build secure backend services that store, manage, rotate, and deliver secrets, keys, certificates, and related sensitive materials.
-
Improve key exchange mechanisms so software services can securely communicate, establish trust, and protect sensitive information in transit and at rest.
-
Make secret rotation safer and more automated, reducing service breakage, manual handling, and unsafe credential storage patterns.
-
Build reliable APIs, tooling, and workflows that help other engineering teams adopt secrets and key-management capabilities with less friction.
-
Improve availability, scalability, monitoring, alerting, and operational safety for security-critical production systems.
-
Lead threat modeling, security reviews, design hardening, and sensitive-data exposure analysis across service boundaries.
-
Partner with application, infrastructure, identity, and security teams to make secret management more consistent across the company.
-
Own production quality through incident response, debugging, operational improvements, resiliency work, and reduction of manual operations.
-
Lead complex projects independently, drive alignment across teams, mentor engineers, and raise the engineering bar for security-sensitive systems.
Qualifications
-
Deep experience designing and operating distributed backend services in production at meaningful scale.
-
Strong security engineering judgment across access control, encryption, identity, trust boundaries, key management, certificate lifecycle, and failure modes.
-
Experience building reliable APIs, automation, and developer-facing infrastructure used by multiple engineering teams.
-
Operational excellence in observability, incident response, reliability engineering, scalability, and safe production change management.
-
Ability to lead ambiguous technical programs, make durable architecture decisions, influence across teams, and mentor engineers.
-
Comfort working with application, infrastructure, identity, and security partners on high-trust, security-sensitive systems.
-
Practical experience with threat modeling, security reviews, hardening, and production risk reduction for sensitive-data systems.
*Design, develop, troubleshoot and debug software programs for databases, applications, tools, networks etc.