Software Engineering Architect - Crypto

Overview

This role will shape the architecture and technical direction of foundational OCI security and trust services, including authentication, authorization, service-to-service trust, KMS, secrets, KES, PKI, and certificates. The architect will operate across teams to design secure, resilient, highly available distributed systems that support OCI's global cloud footprint and the internal and customer-facing services that depend on it.

Why OCI

OCI offers the scale of a global cloud platform with the ownership and urgency of a team building foundational infrastructure. This role sits close to services that customers and OCI engineering teams rely on for cryptographic trust, security posture, and platform reliability across regions and realms. The person in this seat can influence durable architecture patterns for Tier 0 systems that protect customer data, enable secure service integration, and support OCI's continued cloud expansion.

Responsibilities

• Design and influence secure, scalable, highly available cryptographic services across OCI's global cloud footprint.
• Lead architecture for services supporting authentication, authorization, service-to-service trust, KMS, secrets, certificates, PKI, and key exchange.
• Partner with engineering leaders and architects to evaluate security risk, improve resiliency, and strengthen platform-wide trust controls.
• Modernize existing services into cloud-native, operationally simple architectures that can scale across regions, realms, and customer security models.
• Define best practices for secure distributed systems, observability, fault tolerance, disaster recovery, and operational excellence for Tier 0 services.
• Guide architecture reviews and technical decisions across teams that integrate with OCI Crypto services.
• Mentor senior engineers and help establish durable design patterns for reliability, security, and performance at hyperscale.

Qualifications

• 15+ years of experience designing, building, and operating large-scale, highly available distributed systems.
• Deep expertise in distributed systems topics such as scalability, consistency, replication, failure isolation, performance, and fault tolerance.
• Strong background in security engineering, authentication, authorization, cryptographic services, PKI/certificates, secrets, and cloud security architecture.
• Experience operating or architecting services for hyperscale cloud providers or similarly complex enterprise infrastructure environments.
• Ability to influence architecture across organizations, make sound tradeoffs in ambiguous environments, and align senior technical stakeholders.
• Strong fundamentals in systems design, data structures, algorithms, operating systems, networking, databases, NoSQL, storage, and distributed persistence.
Experience with control plane services, multi-region/realm operation, service modernization, and large-scale architecture transformation is strongly preferred.

As a member of the software engineering division, you will take an active role in the definition and evolution of standard practices and procedures. Suggest and justify product directions within approved directions. Define responsibilities for new projects and specifies, designs and develops software according to those specifications. Provide consultative software guidance and strategic direction associated with the developing, designing and debugging of software applications or operating systems.