Senior Principal Software Engineer - Secrets Management (Nashville)

Career Level - IC5

We are seeking an experienced Security Engineer to design and build secure backend services that store, manage, rotate, and deliver secrets, keys, certificates, and related sensitive materials; improve key exchange mechanisms; automate secret rotation; and create reliable APIs and tooling to help engineering teams adopt secret‑management capabilities.

Responsibilities

• Design and build secure backend services that store, manage, rotate, and deliver secrets, keys, certificates, and related sensitive materials.
• Improve key exchange mechanisms so software services can securely communicate, establish trust, and protect sensitive information in transit and at rest.
• Make secret rotation safer and more automated, reducing service breakage, manual handling, and unsafe credential storage patterns.
• Build reliable APIs, tooling, and workflows that help other engineering teams adopt secrets and key‑management capabilities with less friction.
• Improve availability, scalability, monitoring, alerting, and operational safety for security‑critical production systems.
• Lead threat modeling, security reviews, design hardening, and sensitive‑data exposure analysis across service boundaries.
• Partner with application, infrastructure, identity, and security teams to make secret management more consistent across the company.
• Own production quality through incident response, debugging, operational improvements, resiliency work, and reduction of manual operations.
• Lead complex projects independently, drive alignment across teams, mentor engineers, and raise the engineering bar for security‑sensitive systems.

Qualifications

• Deep experience designing and operating distributed backend services in production at meaningful scale.
• Strong security engineering judgment across access control, encryption, identity, trust boundaries, key management, certificate lifecycle, and failure modes.
• Experience building reliable APIs, automation, and developer‑facing infrastructure used by multiple engineering teams.
• Operational excellence in observability, incident response, reliability engineering, scalability, and safe production change management.
• Ability to lead ambiguous technical programs, make durable architecture decisions, influence across teams, and mentor engineers.
• Comfort working with application, infrastructure, identity, and security partners on high‑trust, security‑sensitive systems.
• Practical experience with threat modeling, security reviews, hardening, and production risk reduction for sensitive‑data systems.
• Design, develop, troubleshoot, and debug software programs for databases, applications, tools, networks, etc.

Salary and Benefits

US: Hiring Range in USD from: $135,200 – $306,400 per year. May be eligible for bonus, equity, and compensation deferral.

Oracle US offers a comprehensive benefits package which includes the following:

• Medical, dental, and vision insurance, including expert medical opinion
• Short‑term disability and long‑term disability
• Life insurance and AD&D
• Supplemental life insurance (Employee/Spouse/Child)
• Health‑care and dependent‑care Flexible Spending Accounts
• Pre‑tax commuter and parking benefits
• 401(k) Savings and Investment Plan with company match
• Paid time off: Flexible Vacation for eligible employees; vacation accrual details are provided in the benefit documents.
• 11 paid holidays
• Paid sick leave: 72 hours upon hire, refreshed yearly, up to 112 hours max.
• Paid parental leave
• Adoption assistance
• Employee Stock Purchase Plan
• Financial planning and group legal services
• Voluntary benefits including auto, homeowner, and pet insurance

Equal Employment Opportunity

Oracle is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability, veteran status, or any other characteristic protected by law. Oracle will consider for employment qualified applicants with arrest and conviction records pursuant to applicable law.

Additional Information

Certain U.S. based or U.S. customer or client‑facing roles may be required to comply with applicable requirements, such as immunization/occupational health mandates, and/or drug testing requirements.