About the Role
Join OCI’s Edge Security team as a Principal Software Engineer focused on building and scaling Oracle Cloud Infrastructure’s Web Application Firewall (WAF) platform. You will lead the design and development of highly available, cloud-scale services that protect customer applications from web-based threats, automate security enforcement, and deliver advanced traffic inspection and policy management capabilities across OCI’s global infrastructure. In this role, you will drive the architecture of distributed systems that power WAF features such as threat detection, rule evaluation, bot mitigation, API protection, and security analytics. You will partner closely with security engineers, product managers, and platform teams to deliver secure, performant, and reliable services while helping define the long-term technical vision for OCI’s application security portfolio.
Responsibilities
- Lead the architecture and delivery of cloud-scale backend services that power OCI's Web Application Firewall (WAF) platform.
- Design and evolve highly available policy management, rule evaluation, traffic inspection, bot mitigation, API protection, and security analytics services.
- Build scalable distributed systems that process and analyze high volumes of HTTP/HTTPS traffic while maintaining low latency and high reliability.
- Drive engineering excellence through software architecture reviews, design documentation, code quality standards, and operational best practices.
- Partner closely with Security Engineering, Product Management, SRE, and OCI platform teams to define and deliver next-generation application security capabilities.
- Establish robust observability through metrics, logging, tracing, alerting, and performance monitoring to ensure service health and customer visibility.
- Lead automation initiatives across the software development lifecycle, including CI/CD, testing frameworks, deployment automation, and Infrastructure-as-Code.
- Drive reliability, scalability, and operational readiness through capacity planning, incident response, root cause analysis, and continuous improvement.
- Mentor engineers, influence technical strategy across organizations, and help raise the engineering bar through design reviews and technical leadership.
Requirements
- 7–10+ years building production software systems, including experience developing large-scale distributed services in cloud or SaaS environments.
- Strong proficiency in one or more of the following languages: Java, Go, Python, C++, or Rust.
- Deep expertise in distributed systems design, including scalability, resiliency, concurrency, fault tolerance, service communication, and API design.
- Strong understanding of HTTP/HTTPS, REST APIs, TLS, reverse proxies, caching, load balancing, and web application architectures.
- Experience building customer-facing platform services with strict requirements around availability, performance, and operational excellence.
- Proven experience with cloud-native technologies, including containers, Kubernetes, CI/CD pipelines, Infrastructure-as-Code, and automated testing frameworks.
- Strong software engineering fundamentals, including design patterns, performance optimization, code quality, and secure software development practices.
- Experience building observability solutions using metrics, distributed tracing, centralized logging, dashboards, and alerting systems.
- Demonstrated ability to lead complex technical initiatives and influence architecture decisions across multiple engineering teams.
- Excellent communication and collaboration skills with a track record of working effectively across engineering, security, product, and operations organizations.
Skills
- Java
- Go
- Python
- C++
- Rust
- HTTP/HTTPS
- REST APIs
- TLS
- Reverse proxies
- Caching
- Load balancing
- Web application architectures
- Containers
- Kubernetes
- CI/CD pipelines
- Infrastructure-as-Code
- Automated testing frameworks
- Design patterns
- Performance optimization
- Code quality
- Secure software development practices
- Metrics
- Distributed tracing
- Centralized logging
- Dashboards
- Alerting systems
- Web Application Firewall (WAF)
- API Security
- Bot Management
- CDN
- Edge Computing
- OWASP Top 10 vulnerabilities
- Rule engines
- Policy evaluation systems
- Threat detection platforms
- Traffic inspection technologies
- Analytics
- Telemetry
- Event-processing pipelines
- Zero Trust principles
- Identity and access management
- Secure service-to-service communication
- Compliance
- Audit readiness
- Security-by-design
Experience Level
- Principal
Benefits
- Flexible medical
- Life insurance
- Retirement options
About the Company
- Only Oracle brings together the data, infrastructure, applications, and expertise to power everything from industry innovations to life-saving care. And with AI embedded across our products and services, we help customers turn that promise into a better future for all. Discover your potential at a company leading the way in AI and cloud solutions that impact billions of lives.
- True innovation starts when everyone is empowered to contribute. That’s why we’re committed to growing a workforce that promotes opportunities for all with competitive benefits that support our people with flexible medical, life insurance, and retirement options. We also encourage employees to give back to their communities through our volunteer programs.
Equal Opportunity
- We’re committed to including people with disabilities at all stages of the employment process. If you require accessibility assistance or accommodation for a disability at any point, let us know by emailing accommodation-request_mb@oracle.com or by calling 1-888-404-2494 in the United States.
- Oracle is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability and protected veterans’ status, or any other characteristic protected by law. Oracle will consider for employment qualified applicants with arrest and conviction records pursuant to applicable law.
