Director, Engineering - Hardware Security
Oracle Cloud Infrastructure (Portland, Seattle, Austin)

At Oracle Cloud Infrastructure (OCI), we build the future of the cloud for Enterprises as a diverse team of fellow creators and inventors. We act with the speed and attitude of a start-up, with the scale and customer-focus of the leading enterprise software company in the world.

Values are OCI’s foundation and how we deliver excellence. We strive for equity, inclusion, and respect for all. We are committed to the greater good in our products and our actions. We are constantly learning and taking opportunities to grow our careers and ourselves. We challenge each other to stretch beyond our past to build our future.

You are the builder here. You will be part of a team of really smart, motivated, and diverse people and given the autonomy and support to do your best work. It is a dynamic and flexible workplace where you’ll belong and be encouraged.

The Oracle Cloud Infrastructure (OCI) Hardware Security team provides OCI with the capabilities to ensure our systems and services meet the security objectives we communicate to customers as architectural features of our cloud environment. This work starts with building a strong foundation, looking at the level of the physical compute and networking infrastructure we use in OCI data centers. It begins with the supply chain, through to deployment, and finally to decommissioning.

Who are we looking for?
Our ideal candidate is a hardworking and hands-on leader about security and fostering their knowledge every day and their team. We hope you like working at scale as much as we do because Oracle has no shortage of it! This leader must be able to critically examine an organization and system through the perspective of a threat actor and articulate risks in clear, detailed terms. These are exciting times in our space! We are growing fast, maturing, and working on results-oriented new initiatives. A security-focused engineer and leader can have significant technical and business impact. Craft the future of one of the largest clouds on earth with us!

• Analyze the competition, user trends, emerging technology to help maintain technical roadmaps
• Actively promote teamwork between R&D, platform development and marketing to optimize product roadmaps and customer experience
• Supports a culture of accountability, integrity and high expectations
• Perform security reviews of firmware and hardware designs and assist others in ensuring our products' quality and robustness.
• Recommend standard methodologies for secure service development driving continuous improvement in the engineering organization. Including mentoring, developing, and delivering training materials, producing frameworks to reduce standard methodology patterns to an application for use in production efforts.
• Drive implementation and verification of hardware features that improve the security of our platforms
• Collaborate to develop a long-term security roadmap for the hardware we put into our infrastructure and platforms.
• Responsibly and securely disclose 3rd party vulnerabilities to vendors
• Provide direction and advice on emerging threats, weaknesses, and security practices that may impact the security posture of the hardware environment.

• Minimum of 3 years at a senior management level
• 8 years of relevant hardware development experience with a focus and interest in hardware security
• BS, MS or Ph.D. in Electrical Engineering, Computer Science, Engineering or similar degree with 8 years of meaningful, relevant work or research
• Understanding the importance of a balanced and encouraging team culture
• Strong overall business and communication skills, including executive presentation skills and eye for business
• Experience with the following key technologies and security fundamentals\: ASIC design process or experience with architecture of large SoCs
• System architecture for server platforms
• Cryptography algorithms, standards, implementation and application
• Remote attestation, TPMs, Secure Boot
• Programming and debugging fundamentals in languages/interfaces, such as C/C , Verilog, ARM, Python, JTAG, etc

• Minimum of 5 years at a senior management level
• 12 years of relevant hardware development experience with a focus and interest in hardware security
• Familiarity with kernel-level security concepts.
• Experience and hands-on experience with the following attack techniques and debugging tools\: Threat modeling, penetration testing, reverse engineering and attacks on hardware/firmware/features
• Knowledge of firmware-based malware and device-centric persistence
• Micro architectural attacks (side channels, fault injection, etc) - see Spectre/Meltdown/L1TF/Rowhammer
• Fuzzing, negative testing and other testing techniques
• Experience working in the cloud/hardware industry and is excited to train, mentor, and supervise a team.
• Familiarity or direct experience with vendor security disclosures

!|!Manage a team that designs, develops, troubleshoots and debugs software programs for databases, applications, tools, networks etc.

As a director of the software engineering division, you will apply your extensive knowledge of software architecture to manage software development tasks associated with developing, debugging or designing software applications, operating systems and databases according to provided design specifications. Build enhancements within an existing software architecture and envision future improvements to the architecture.

Assists in the development of short, medium, and long term plans to achieve strategic objectives. Regularly interacts across functional areas with senior management or executives to ensure unit objectives are met. Ability to influence thinking or gain acceptance of others in sensitive situations. Demonstrated leadership and people management skills. Strong communication skills, analytical skills, thorough understanding of product development. BS or MS degree or equivalent experience relevant to functional area. 7 years of software engineering or related experience.

Oracle is an Affirmative Action-Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability, protected veterans status, age, or any other characteristic protected by law.

!|!