Lead Principal Security Engineer

About the role

The Oracle Cloud Infrastructure (OCI) team is seeking a Lead Principal Security Engineer to define and enforce security requirements for compute hardware used in our cloud services. You will work across Oracle, with third‑party vendors and standards bodies to shape the next generation of hardware platform security.

Key responsibilities

• Define security requirements for hardware to meet OCI’s security posture and business needs.
• Provide independent design consulting for complex compute systems, balancing security risks and business objectives.
• Conduct hands‑on security assessments, including adversarial testing and reverse engineering of hardware platforms.
• Collaborate with operations and engineering teams to implement security controls throughout provisioning, reuse, and decommissioning.
• Communicate risks and mitigation options to senior leadership and drive security and process improvements.

Required profile

• Bachelor’s degree in Electrical Engineering, Computer Science or related field, or equivalent experience.
• 10+ years of experience in hardware security architecture, engineering, validation or planning.
• Demonstrated competency in hardware/firmware security and strong understanding of computer architecture.
• Experience working in large, distributed organizations and communicating technical concepts to senior stakeholders.

Required skills

• Root of Trust technologies (TCG SRTM, DRTM), Secure Boot, DICE, attestation protocols (e.g., SPDM).
• Expertise in x86 (Intel, AMD) and ARM server platform architectures.
• Knowledge of UEFI, GPU platforms, rack‑scale systems, BMC, SmartNIC/DPU, and storage devices.
• Proficiency in C, C++, Java, Python, Ruby, Go, Rust.
• Ability to read complex hardware schematics and perform reverse‑engineering using reversing tools.