Oracle Cloud (OCI) Security Specialist

• All legitimate correspondence from our recruiting team will only come from an email address ending in @lrs.com. We do not use generic domains like @gmail.com, @yahoo.com, or @outlook.com.
• We never conduct interviews solely via text-based chat on Microsoft Teams, Telegram, or WhatsApp. All virtual interviews involve a scheduled video or phone call with a member of our team.
• LRS will never ask a candidate for payment, fees, or to purchase equipment (e.g., laptops, software) as a condition of employment.
• All genuine job opportunities are listed directly on our official careers portal at Careers., LRS Consulting Services is seeking an Oracle Cloud Infrastructure (OCI) Security Specialist to support an independent security and privacy assessment of a state government client's hosted platform. The system is hosted on OCI in the Oracle government cloud with Oracle databases and multiple external-facing web portals. This role focuses specifically on the Oracle platform and database layers of the assessment. The assessment team will lead the overall engagement, test planning, reporting, and penetration testing; this specialist will own the OCI and Oracle Database assessment workstream. The anticipated engagement runs September 2026 through December 2026, full-time initially with potential transition to part-time support later in the engagement.

What You Will Do

• Assess implemented OCI configurations against security requirements and CIS OCI Foundations Benchmarks (Levels 1 and 2), including IAM, compartments and policies, network security (VCNs, security lists, NSGs), logging and audit, encryption, and key management
• Perform Oracle Database security assessment, including review of default and privileged accounts, access controls, encryption (TDE), and audit configuration
• Execute and evaluate database scans and support infrastructure scans for in-scope components using tools such as Tenable, Qualys, or Oracle DBSAT
• Review firewall and network access control configurations against documented security requirements
• Document findings with sufficient technical detail for the system vendor to reproduce and remediate issues
• Provide input to the assessment team's test plan, workbook, and final report for the OCI and database workstreams
• Participate in findings review sessions and answer technical questions on Oracle-related findings

• 5+ years of experience in Oracle infrastructure, database administration, or cloud security roles
• Hands-on experience with Oracle Cloud Infrastructure (OCI) security services and configuration, including IAM, networking, logging, and encryption
• Experience with Oracle Database security hardening or assessment, including privilege and default account review, encryption, and auditing
• Familiarity with CIS Benchmarks for OCI and/or Oracle Database
• Experience with vulnerability or compliance scanning tools (Tenable, Qualys, Oracle DBSAT, or similar)
• Ability to document technical findings clearly for both technical and non-technical audiences
• Ability to pass a background check and execute NDA and HIPAA Business Associate agreements
• Must be free of any conflict of interest with the system's development, operations, or management vendors
• Must reside and perform all work within the contiguous United States, * OCI Security Professional or OCI Architect certification
• CISSP, CISA, or equivalent security certification
• Experience supporting NIST SP 800-53 assessments, FedRAMP engagements, or other government security compliance work
• Experience in Oracle government cloud environments
• Experience with Medicaid, health and human services, or other CMS-regulated systems

The base range for this contract position is $95 - $120 per hour (W2), depending on experience and qualifications.