Senior Oracle Security and AI Engineer

Lead the technical security and automation initiatives across Oracle Fusion Cloud environments, with ownership spanning governance, controls, and AI-enabled security operations.

Responsibilities

• Own technical management of all Fusion environments, including scheduled environment refreshes, instance cloning, environment usage management, and maintaining system configuration baselines.
• Participate in preparation and execution of Oracle’s mandatory quarterly cloud updates by completing pre-update checks and performing post-update technical smoke testing.
• Own non-functional requirements for Oracle Cloud environments, including security architecture, role design governance, and performance benchmarking.
• Enforce technical configuration control standards across the environment.
• Provide security administration and support for Oracle Fusion Applications plus PaaS and DBaaS platforms.
• Design, build, and deploy custom security roles for Oracle Fusion Applications, aligning deployments with least privilege and Segregation of Duties requirements and Sensitive Access compliance frameworks.
• Serve as the technical owner for Oracle Fusion Risk Management Cloud.
• Configure, deploy, and maintain Advanced Access Controls - AAC and Advanced Financial Controls - AFC to detect and mitigate financial risks, fraud, and policy violations, translating audit requirements into platform controls.
• Provide Level 2/Level 3 technical support for environment-related issues, access problems, and deployment failures.
• Act as an escalation point for platform-level incidents, performing root cause analysis.
• Evaluate, design, and deploy AI-driven tools including Model Context Protocol implementations/maintenance, Terraform-based automation scripts, and security artifacts to improve security operations, streamline threat monitoring, and optimize governance workflows across the Oracle Cloud ecosystem.

Requirements

• 8+ years focusing on technical administration/support within the Oracle ecosystem.
• 4+ years designing, building, and deploying custom security roles in the Oracle Fusion Applications environment.
• Expert-level knowledge managing Oracle Fusion Cloud environments (ERP, GTM, EPM), including environment refresh and cloning processes.
• Deep technical familiarity with Oracle Cloud Infrastructure administration and monitoring.
• Strong understanding of security architecture, Oracle Fusion Risk Management Cloud, role design governance, and performance management within a cloud ERP.
• Strong understanding of MCP and agentic capabilities with Oracle Fusion (ERP, EPM, GTM), AI Database, Oracle Integration Cloud, and Oracle Fusion Data Intelligence.

Technologies

• Oracle Fusion ERP Cloud
• Oracle Fusion Applications
• Oracle Fusion Risk Management Cloud
• Advanced Access Controls - AAC
• Advanced Financial Controls - AFC
• Oracle Cloud Infrastructure
• Terraform
• Model Context Protocol (MCP)
• Oracle Integration Cloud
• Oracle Fusion Data Intelligence
• AI Database
• OCI PaaS Toolsets
• Flexagon FlexDeploy
• Opal IGA

Location

• Austin, TX (onsite)

Nice-to-Have Skills

• Experience in an organization transitioning to the Oracle Cloud ecosystem.
• Hands-on experience with OCI PaaS Toolsets.
• Exposure to the Data Center Infrastructure industry.
• Relevant professional product/functional certifications (for example: Oracle Cloud Infrastructure and Security certifications).
• Skilled in administering DevOps tools such as Flexagon FlexDeploy and using Opal IGA.
• Experience with Cloudflare’s Developer platform or equivalent (for example: AWS).

What Makes Cloudflare Special?

• Project Galileo: Since 2014, equipped more than 2,400 journalism and civil society organizations in 111 countries with tools to defend against attacks that would otherwise censor their work, used by Cloudflare enterprise customers at no cost.
• Athenian Project: Since 2017, helping state and local governments access election information and voter registration with free services, providing support to more than 425 local government election websites in 33 states.
• 1.1.1.1: Released to help improve the Internet by building a faster, more secure, privacy-centric public DNS resolver available for public use.
• 1.1.1.1 privacy commitment: Cloudflare states it does not store client IP addresses and does not sell user data to advertisers or use it to target consumers.
• Applicants advancing to the offer stage may be asked to attend an in-person interview at a Cloudflare Office or Cloudflare Hub.
• This position may involve access to information protected under U.S. export control laws, including the U.S. Export Administration Regulations; employment offers may be conditioned on authorization to receive controlled software or technology without sponsorship for an export license.
• Cloudflare is an equal opportunity employer and provides reasonable accommodations to qualified individuals with disabilities.