Principal Security Engineer

Oracle Cloud Infrastructure is seeking a Principal Hardware Security Engineer to define and implement hardware security requirements that support OCI security posture and compliance needs. This role involves working across Oracle, third-party vendors, and standards organizations to shape next-generation hardware platform security and strengthen operational security through supply chain and operational controls.

Responsibilities

• Define security requirements for hardware that align with business needs and technology trends to support OCI security posture
• Provide independent design consulting within the area of expertise to implement requirements produced by the hardware security team
• Provide independent design consulting to implement features required to achieve security bar targets
• Provide independent design consulting to ensure operations including provisioning, re-use, and decommissioning are aligned with the security posture
• Conduct security assessments of compute devices to verify they meet established requirements
• Perform adversarial assessments of compute devices to help ensure they cannot be compromised
• Assess risk based on findings and threat models, and identify appropriate risk mitigation controls
• Collaborate across teams to ensure requirements, findings, and recommendations are implemented
• Mentor junior engineers

Requirements

• Bachelor's degree in Electrical Engineering, Computer Science or related field (or equivalent experience)
• 8-10+ years of experience in hardware security architecture, engineering, validation, planning, or a related area
• Demonstrated competency in hardware and firmware with a security focus
• Competency with computer architecture
• Subject Matter Expertise in one of the following areas: Root Of Trust (TCG SRTM, DRTM), x86 (Intel, AMD), ARM server platform architecture, UEFI, GPU platforms, rackscale systems, clustering, Baseboard Management Controllers, SmartNICs (DPUs), Storage devices
• Security concepts and standards related to Attestation (for example, SPDM) and measurements, cryptography, Secureboot, DICE
• Ability to work with common programming languages including C, C++, Java, Python, Ruby, Go, Rust
• Ability to read and review hardware schematics for security concerns
• Experience with reversing tools and ability to reverse engineer

Technologies

• TCG SRTM, TCG DRTM
• UEFI
• SPDM
• Secureboot
• DICE
• C, C++, Java, Python, Ruby, Go, Rust
• Intel SGX
• SPI, I2C, RS232-style serial

Preferred Qualifications

• Ability to read and understand x86 and/or ARM assembly language
• Knowledge of vendor-specific TEE technologies such as Intel SGX
• Familiarity with embedded communications interfaces including SPI, I2C, RS232-style serial
• Basic knowledge of enterprise and/or datacenter networking architecture
• Experience operating in a large-scale DevOps or CICD environment
• Ability to write clear and concise product security requirements
• Ability to effectively assess risk from findings and threat models and identify risk mitigation controls
• Ability to succeed individually or collaboratively, including working with external organizations and individuals
• Experience working effectively in a large, distributed company
• Excellent organizational, verbal, and written communication skills

Location and Experience

Nashville, TN (onsite). Minimum experience: 8 years.