Principal Security Architect

Key

Design Evaluation

–Evaluates

existing security architectures independently to identify and prioritize

security design issues and weaknesses.

–Provides

in-depth technical advice to support the design and development of secure

architectures.

–Identifies

gaps and weaknesses in proposed designs of new projects and features and

develops complex compensating controls.

–Facilitates

architecture discussions and security assessments related to the security

design review process and threat modeling.

Security

Solutions Design

• –Designs,
• supports, and/or assesses reviews of complex security solutions for product
• services and infrastructure both on-premise and cloud.

–Designs

• systems for implementing security controls and monitoring the security of
• networks, systems, and applications, ensuring functional goals within the team
• are achieved.

–Works

closely with internal teams (e.g., developers, Product Management, IT,

Operations) to develop products that provide in-depth security insights.

Security

Solutions Research

–Conducts

• standard security research regarding threats, investigates moderately complex
• issues, and oversees upgrades on security platforms, ensuring the highest
• levels of system integrity and protection.

–Collaborates

• closely with internal and external stakeholders (e.g., Oracle Cloud
• Infrastructure) to refine functional requirements and identify functional gaps
• in security solutions.

Security

Standards and Practice

–Supports

• the build or review of security policies, standards, and/or patterns for data
• security issues and compliance, while also providing guidance on privacy
• requirements.

–Incorporates

regulatory requirements, compliance standards, and threat models to tune

implementations and standards for a complex application landscape.

–Develops

and updates existing security standards and programming practices for internal

service development and service security operational processes.

–Reviews

security operations guides for hand-off to the support team for post-launch

support.

Identity

and Access Management:

–Participates

• in and architects the generation of Managed Identity and Access Management
• services and pre-sales activities, providing guidance for resolution of
• customer-reported issues.

Core

Responsibilities

Planning

& Execution

–Manages

• and coordinates moderately complex tasks, monitoring timelines and deliverables
• to ensure timely completion and adherence to requirements for a moderately
• sized project or initiative.

–Efficiently

• delegates, monitors, and prioritizes work across multiple projects, providing
• technical oversight and adjusting plans to address shifts in resources or
• timelines.

Collaboration

& Partnership

–Collaborates

across the organization to align on expectations and achieve shared objectives.

–Leverages

understanding of business leaders, stakeholders, and/or customers to ensure

proposed solutions meet their needs.

–Supports

inclusivity by actively seeking and listening to diverse perspectives, ensuring

others feel heard and respected.

Problem

Solving

–Identifies

and addresses moderately complex issues by analyzing a wide range of data

and/or information to identify solutions in accordance with standard practices.

–Proactively

• escalates unresolved or critical issues with a thorough assessment and suggests
• potential solutions.
• –Reviews,
• contributes to, and documents problem-solving strategies.

Learning

–Pursues

learning opportunities to expand knowledge and skills and/or tools in new areas

and stays abreast of the latest industry trends and best practices.

–Proactively

seeks and leverages ongoing feedback and training to improve skills.

–Coaches

and mentors junior team members, fostering continuous learning and knowledge

sharing within and across teams.

Continuous

Improvement

–Develops

• ideas, recommends updates, and/or collaborates on the implementation of process
• improvements to increase the efficiency and effectiveness of processes,
• protocols, and workflows across teams, and evaluates the impact on key
• stakeholders.

–Solicits

feedback from others on ideas for alternative approaches and methods for

continued improvement.

Performance

and Development:

–Contributes

to the talent development pipeline by participating in candidate interviews,

assessing candidates, and providing hiring recommendations.