> Markdown version of [/jobs/ext/2242264-lead-security-architect-cloud-database-platforms](https://www.wearedevelopers.com/jobs/ext/2242264-lead-security-architect-cloud-database-platforms). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Lead Security Architect - Cloud Database Platforms - **Company:** Montash - **Location:** Zaragoza, Spain - **Contract:** Permanent contract - **Skills:** Microsoft Azure, Cloud Database, Databases, Database Security, Software Design Patterns, DevOps, Identity and Access Management, Key Management, Network Security, PostgreSQL, OAuth, OpenID, Oracle Databases, Oracle (Applications), Azure Active Directory, Zero Trust Network Access, Security Information and Event Management, Software Vulnerability Management, Snowflake, Data Lakes, Data Management, CIS Benchmarks, Oracle Cloud Infrastructure, Devsecops - **Published:** August 26, 2026 - **Apply:** https://www.buscojobs.com.es/lead-security-architect-cloud-database-platforms-en-zaragoza-ID-368964910 ## About the Role What you bring and why we're specific about it Strong, hands-on experience securing Oracle Database (including Advanced Security) - experience with Oracle on OCI is a must, not a nice-to-have. Solid PostgreSQL security experience, and genuine openness to extending into Snowflake and other data platforms. Real OCI security and networking expertise, plus working comfort in Azure - the surrounding tech landscape is mostly Azure-based, so you need to operate across both clouds. Deep, practical knowledge of Microsoft Entra ID and identity-based database access. Working knowledge of security and compliance frameworks such as ISO *****, SOC 2, GDPR, CIS Benchmarks, and DORA Certificate lifecycle and secrets management experience. Previous experience leading or tech-leading a team, ideally shaped by a DevOps career path, in agile/Kanban environments. Excellent communication skills - you can explain a complex control decision to an engineer and to a non-technical compliance stakeholder in the same afternoon. xsgfvud If you're this rare mix of architect, hands-on implementer, and regulatory translator and the idea of owning security for a large-scale cloud database platform (with room to shape how AI security gets handled next) excites you, we'd love to hear from you. ## Description On behalf of our client, a global financial services enterprise running a large-scale, highly regulated cloud data platform - we're looking for a Lead Security Architect to own the security of their Oracle (OCI) and PostgreSQL database landscape.¿Tiene su CV preparado?Si es así y confía en que este es el puesto ideal para usted, asegúrese de enviar su solicitud lo antes posible.Why this role is different Most security architect roles hand you the rules and expect someone else to build the control.Most DBA/security-engineering roles hand you a ticket and expect someone else to have already decided what "secure" means.This role is neither.You will own the full chain: understand what EU regulation (DORA, BaFin, GDPR, and internal group security standards) actually requires, translate that into concrete architecture for the cloud database estate, and then get hands-on with the implementation yourself.You'll also be the person who sits across the table from auditors and regulators and can explain, in plain language, why the architecture is built the way it is and you'll lead a small squad of engineers who help you deliver it.Our client is entirely cloud-native, working in Kanban, as a pure delivery team fully decoupled from line management - you organize and prioritize the work.What you'll own End-to-end secure architecture for Oracle Database on OCI and PostgreSQL: encryption, key management, hardening, and secure-by-design patterns.Zero Trust network security for cloud database environments - private endpoints, segmentation, certificate lifecycle management.Threat modelling that turns into real engineering controls, not slide decks.Identity and access integration with Microsoft Entra ID, OAuth/OIDC, Conditional Access, Privileged Identity Management for database access.Vulnerability management and DevSecOps practices across the platform.Being the primary point of contact for security audits and annual pentests - prepping, guiding, and converting findings into remediation.Leading and mentoring a 3-person security engineering squad - priorities, incidents, stakeholder communication (including customer-facing conversations).Defining the concept and continuous improvement of audit record collection and SIEM integration for database security alerting.A growing mandate: today it's mostly Oracle, but PostgreSQL is expanding fast (especially with an upcoming data lake product), and other providers are on the radar.You'll need to grow the security model with the platform, not just maintain what exists.An open field almost nobody is properly covering yet: security of AI tooling as it gets embedded into the platform.If you want to make this your signature project, there's real room to do it.What you bring and why we're specific about it Strong, hands-on experience securing Oracle Database (including Advanced Security) - experience with Oracle on OCI is a must, not a nice-to-have.Solid PostgreSQL security experience, and genuine openness to extending into Snowflake and other data platforms.Real OCI security and networking expertise, plus working comfort in Azure - the surrounding tech landscape is mostly Azure-based, so you need to operate across both clouds.Deep, practical knowledge of Microsoft Entra ID and identity-based database access.Working knowledge of security and compliance frameworks such as ISO *****, SOC 2, GDPR, CIS Benchmarks, and DORA Certificate lifecycle and secrets management experience.Previous experience leading or tech-leading a team, ideally shaped by a DevOps career path, in agile/Kanban environments.Excellent communication skills - you can explain a complex control decision to an engineer and to a non-technical compliance stakeholder in the same afternoon.xsgfvud If you're this rare mix of architect, hands-on implementer, and regulatory translator and the idea of owning security for a large-scale cloud database platform (with room to shape how AI security gets handled next) excites you, we'd love to hear from you.Apply directly or reach out to to learn more. ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [Hacking MSSQL on Cloud. All of them. How I became sysadmin on Azure, AWS, GCP and Alibaba.](https://www.wearedevelopers.com/videos/100339-hacking-mssql-on-cloud-all-of-them-how-i-became-sysadmin-on-azure-aws-gcp-and-alibaba) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) - [How building an industry DBMS differs from building a research one](https://www.wearedevelopers.com/videos/768-how-building-an-industry-dbms-differs-from-building-a-research-one) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)