The Oracle Cloud Infrastructure (OCI) team can provide you the opportunity to build and operate a suite of massive scale, integrated cloud services in a broadly distributed, multi-tenant cloud environment.  OCI is committed to providing the best in cloud products that meet the needs of our customers who are tackling some of the world’s biggest challenges.

Oracle’s Cloud Infrastructure (OCI) team is a new ground-up effort to build Infrastructure-as-a-Service that operates at a high scale in a broadly distributed multi-tenant cloud environment. Our customers run their businesses on our cloud, and our mission is to provide them with best-in-class compute, storage, networking, database, security, and an ever-expanding set of foundational cloud-based services. These are exciting times in our space - we are growing fast, still at a relatively early stage, and working on ambitious new initiatives.

We are building a new Software Assurance Gateway team at OCI. Our mission is to build and operate a set of gateway services to perform comprehensive software assurance of the applications running within a tenancy. Software assurance includes measures to prevent the deployment of malware or vulnerable, malicious, or unauthorized code into the application’s tenancy. It also includes monitoring the flow of data in and out of the application’s tenancy to prevent unauthorized exfiltration of data. The software gateway services will intercept web traffic, operator actions, and CI/CD pipelines to perform a set of assurance functions such as vulnerability scanning, signature validation, rules checking, policy compliance and anomaly detection. These functions will generate logs, audit trails, metrics, and alerts to enable automated and manual assurance of code as well as ingress/egress traffic. The team will develop and maintain the gateway code as well as operate the gateway infrastructure for the application. The team will be responsible for the performance, scalability, and reliability of the gateways. In particular, they will be responsible for ensuring that the performance of the application, as well as the developer velocity of the application teams, are not negatively impacted by the assurance gateways. They will optimize the gateway code to ensure low overhead and they will scale the gateways to handle increases in traffic and in the frequencies of application updates.