Senior Oracle Database Engineer

This is a fully remote position, open to applicants in Bulgaria.

📋 Description

• Strengthen Oracle 19c databases operating on Enterprise Linux (OEL/RHEL 8 & 9) in FIPS mode.

• Implement and sustain Oracle authentication integrated with Azure Entra ID, PIM, RBAC, and Linux VM SSO.

• Configure and oversee TCPS (TLS), TDE with external key management via Azure Key Vault/Oracle Wallet, and encrypted RMAN backups.

• Execute configuration and security remediation modifications through production Terraform and Ansible pipelines, ensuring no manual changes in production.

• Conduct DISA STIG and Oracle DB-SAT scans, address vulnerabilities, and identify remediations or formal exceptions.

• Maintain and verify cross-region encrypted backup and recovery processes, including key escrow and database cloning with re-keying protocols.

• Actively manage tickets, submit merge requests, implement security baselines, and create production IaC.

• Integrate operating system and database security across backup, cloning, and disaster recovery workflows.

• Generate direct compliance evidence for assessors.

⛳️ Requirements

• Over 8 years of experience as a hands-on Oracle DBA / Security Engineer working with Oracle 19c features.

• Practical experience in delivering DISA STIG (Oracle 19c) and Oracle DB-SAT remediations, including formal risk-based exception assessments.

• Previous experience in regulated environments such as FedRAMP, DoD IL, CMMC, or equivalent.

• Hands-on experience with TDE, Oracle Wallet, TCPS certificate/trust store management, and encrypted RMAN backups using external key stores.

• Extensive knowledge of Oracle authentication through Entra ID (Azure AD), Azure Key Vault, Blob Storage, managed disk encryption, and Azure PIM/RBAC.

• Profound expertise in Terraform and Ansible for environment deployment and configuration management via CI/CD pipelines.

• Experience in administering OEL/RHEL 8/9 in FIPS mode.

• Capability to influence technical design and security decisions across DBA, Platform, and DevOps teams without formal authority.

• Located in the UK or EU and eligible to contract within Europe.

• Available to commence work within 4 weeks.

• Preferred: Oracle Certified Professional (OCP), Oracle Database Security Specialist, or Azure Security Engineer (AZ-500).

• Preferred: OpenSCAP in CI/CD pipelines with continuous drift detection.

• Preferred: Experience with Argo Workflows, Kubernetes-based CI/CD, or Helm charts.

• Preferred: Familiarity with FIPS 140-3 provider changes, Filebeat/Elastic setups on FIPS hosts, or exposure to Oracle option licensing.

🏝️ Benefits

• Contract engagement for an initial duration of 6 months, with a strong possibility of extension.

• Fully remote working arrangement.

• Competitive daily rate (DOE).