Job Summary
n addition to the responsibilities listed below, this position is responsible for providing expert level consultation on the design, build, testing, and implementation of information security technologies, including infrastructure and supporting applications related to data protection, network security, and end-point security. This includes managing complex IS projects or programs through both pre-production and implementation phases by partnering with internal technology risk teams, infrastructure management, and external business groups to understand requirements and design and implement solutions accordingly; testing and validating upgrades, enhancements, or new technologies prior to production implementation; consulting on incident support efforts to help resolve and remediate application production issues; and leading the implementation of new security controls as appropriate to resolve incidences and mitigate threat risks. It requires understanding of IT regulatory requirements. This position is also responsible for serving as a lead subject matter expert on infrastructure security operations, leveraging partnerships with the IS Architecture & Strategy team to help develop and validate the long-term direction for security technologies, and providing technical subject matter expertise to support the ongoing assessment and mitigation of information security risks. Some of the unique challenges this position will face include database considerations for a large, corporate enterprise and a high degree of complexity and non-uniformity. Oracle Key Vault (OKV) Administrator is responsible for installation, configuration, key lifecycle management, certificate management, monitoring, security, compliance, and operational support.
Key Responsibilities
Install Oracle Key Vault servers and appliances. Configure network, storage, and security settings. Enroll and manage database endpoints. Configure and support TDE integrations. Create, import, export, and manage encryption keys. Execute scheduled key rotation activities. Manage certificate issuance, renewal, and replacement. Maintain endpoint wallets and keystores. Create and manage user accounts and roles. Monitor OKV health, availability, and performance. Apply patches and routine maintenance updates. Perform backups and recovery operations. Troubleshoot endpoint, wallet, and certificate issues. Resolve routine incidents and service requests. Execute approved change requests. Support problem management and root cause analysis activities. Review audit logs and security events. Maintain operational documentation and runbooks. Support compliance and audit evidence requests. Collaborate with DBA, security, and infrastructure teams.
Skill Requirements
Bachelor\'s degree in Computer Science, CIS, or related field OR Minimum four (4) years experience in an IT operations environment with technical experience in distributed technologies, systems development, and/or networking. 3+ years of Oracle Database Administration experience supporting development, test, or production environments. 2+ years of experience with database security, encryption, and key management technologies. 1-3 years of hands-on Oracle Key Vault (OKV) administration experience. Experience supporting Oracle Transparent Data Encryption (TDE) implementations. Experience performing encryption key lifecycle management activities, including key creation, rotation, and retirement. Experience managing certificates, keystores, wallets, and endpoint enrollments. Experience installing, configuring, patching, and upgrading Oracle Key Vault environments. Experience working with Oracle Linux or Linux server administration. Experience performing backup, recovery, and operational support activities, troubleshooting encryption, wallet, certificate, and endpoint connectivity issues.
Other Requirements
Experience supporting Oracle Key Vault in a large enterprise environment. Experience with Oracle Exadata and enterprise database security technologies. Oracle Database Administration certification or equivalent experience. Experience supporting encryption key rotation and certificate lifecycle management processes. Familiarity with disaster recovery, cyber recovery, and ransomware resilience concepts.