Senior Principal Software Engineer - Secrets Managment

Responsibilities

• Design and build secure backend services that store, manage, rotate, and deliver secrets, keys, certificates, and related sensitive materials.
• Improve key exchange mechanisms so software services can securely communicate, establish trust, and protect sensitive information in transit and at rest.
• Build secret rotation APIs, tooling, and workflows that help other engineering teams adopt secrets and key-management capabilities with less friction.
• Ensure availability, scalability, monitoring, alerting, and operational safety for security-critical production systems.
• Lead threat modeling, security reviews, design hardening, and sensitive-data exposure analysis across service boundaries.
• Partner with application, infrastructure, identity, and security teams to make secret management more consistent across the company.
• Owning production quality through incident response, debugging, operational improvements, resiliency work, and reduction of manual operations.
• Lead complex projects independently, drive alignment across teams, mentor engineers, and raise the engineering bar for security-sensitive systems.

Qualifications

• Deep experience designing and operating distributed backend services in production at meaningful scale.
• Strong security engineering judgment across access control, encryption, identity, trust boundaries, key management, certificate lifecycle, and failure modes.
• Experience building reliable APIs, automation, and developer-facing infrastructure used by multiple engineering teams.
• Operational excellence in observability, incident response, reliability engineering, scalability, and safe production change management.
• Ability to lead ambiguous technical programs, make durable architecture decisions, influence across teams, and mentor engineers.
• Comfort working with application, infrastructure, identity, and security partners on high-trust, security-sensitive systems.
• Practical experience with threat modeling, security reviews, hardening, and production risk reduction for sensitive-data systems.
• Design, develop, troubleshoot and debug software programs for databases, applications, tools, networks etc.

Pay

Hiring Range in USD from: $135,200 - $306,400 per year. May be eligible for bonus, equity, and compensation deferral.

Schedule

Not specified.

Benefits

Oracle maintains broad salary ranges for its roles in order to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect Oracle's differing products, industries and lines of business. Candidates are typically placed into the range based on the preceding factors as well as internal peer equity.

The role will generally accept applications for at least three calendar days from the posting date or as long as the job remains posted.

About Us

Only Oracle brings together the data, infrastructure, applications, and expertise to power everything from industry innovations to life-saving care. And with AI embedded across our products and services, we help customers turn that promise into a better future for all.

We are committed to growing a workforce that promotes opportunities for all with competitive benefits that support our people with flexible medical, life insurance, and retirement options. We also encourage employees to give back to their communities through our volunteer programs.

We are committed to including people with disabilities at all stages of the employment process. If you require accessibility assistance or accommodation for a disability at any point, let us know by emailing accommodation-request_mb@oracle.com or by calling 1-888-404-2494 in the United States.

Oracle is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability and protected veterans’ status, or any other characteristic protected by law. Oracle will consider for employment qualified applicants with arrest and conviction records pursuant to applicable law.