Lead Principal Software Engineer, Secrets Management

Oracle

Confirmed live yesterday High trust

Quick summary

Work type
On-site
Location
Nashville, TN
Salary
$135,200–$306,400 / yr
Posted
136 days ago
Freshness
Confirmed live yesterday

Market check

Salary context

Above market

How this pay compares to similar roles

Similar $195k
This role $221k
$115k $327k
below market most similar roles pay here above market

This role pays more than 75% of similar roles. Most pay $169,550–$220,800 — the blue band above. At the midpoint, this role pays about $221k versus about $195k for comparable roles.

Based on 240 similar postings.

Employer

About Oracle

Oracle Corporation is a leading multinational technology company specializing in database software, cloud computing, and enterprise software.

Oracle currently has 955 open roles on FindRole.

Listed pay typically runs $102,300–$234,600 across 790 roles with salary data.

Most-posted roles

View all roles at Oracle

At a glance

TL;DR · Lead Principal Software Engineer, Secrets Management

The Lead Principal Software Engineer - Secrets Management joins the software engineering division as an individual contributor to design and build secure backend services. This role focuses on developing systems to store, manage, rotate, and deliver secrets, keys, certificates, and other sensitive materials. You will build reliable APIs, tooling, and workflows to automate secret rotation and improve key exchange mechanisms for secure communication. Key responsibilities include leading threat modeling, security reviews, and design hardening for security-critical production systems. You must demonstrate expertise in distributed backend services, encryption, identity, and certificate lifecycles. The work involves solving complex problems regarding sensitive-data exposure, operational safety, and scalability across service boundaries while partnering with infrastructure and security teams to ensure consistent secret management across the entire organization.

What you'll do

  • Design and build secure backend services to store, manage, rotate, and deliver secrets and keys.
  • Improve key exchange mechanisms to secure software communications and protect data in transit and at rest.
  • Automate secret rotation processes to reduce manual handling and prevent unsafe credential storage patterns.
  • Build reliable APIs, tooling, and workflows to help engineering teams adopt key-management capabilities.
  • Improve availability, scalability, monitoring, and operational safety for security-critical production systems.
  • Lead threat modeling, security reviews, and sensitive-data exposure analysis across service boundaries.
  • Own production quality through incident response, debugging, and resiliency work to reduce manual operations.

What we're looking for

  • Must have 10+ years of experience.
  • Must be able to read, write, and speak English.
  • Must have deep experience designing and operating distributed backend services in production at meaningful scale.
  • Must have strong security engineering judgment across access control, encryption, identity, trust boundaries, key management, and certificate lifecycles.
  • Must have experience building reliable APIs, automation, and developer-facing infrastructure used by multiple engineering teams.
  • Must have operational excellence in observability, incident response, reliability engineering, scalability, and safe production change management.
  • Must have practical experience with threat modeling, security reviews, hardening, and production risk reduction for sensitive-data systems.
  • Must have the ability to lead ambiguous technical programs, make durable architecture decisions, and mentor engineers.

More like this

Similar roles

Lead Principal Core Infrastructure Engineer

Oracle

Nashville, TN 24 days ago $146,300–$306,400
OCI Kubernetes Infrastructure as Code CI/CD Site Reliability Engineering Event-Driven Architecture Identity and Access Management Encryption secrets-management Containers Messaging Streaming Observability Disaster Recovery Zero-Trust Architecture ONVIF OSDP RTSP
10+ yrs exp

Lead Principal Software Engineer

Oracle

Nashville, TN 82 days ago $146,300–$306,400
Python Java Oracle Cloud Infrastructure Kubernetes AI ML LLM Distributed Systems CI/CD Linux APIs Data Pipelines Observability Containers Network Automation MCP A2A
10+ yrs exp

Principal Security Software Engineer

Apple Inc

Seattle, WA 7 days ago $205,400–$374,300
Cloud Security Network Security Application Security Python Go Java infrastructure-as-code DevSecOps AWS GCP Azure Threat Modeling Vulnerability Management Security Architecture Secure Coding GDPR PCI-DSS HIPAA
10+ yrs exp

Lead Principal Security Engineer

Oracle

Nashville, TN +2 32 days ago $130,000–$306,400
Hardware Security Firmware x86 ARM UEFI Root Of Trust TCG SRTM DRTM Cryptography Secureboot DICE SPDM C C++ Java Python Ruby Go Rust Intel SGX Assembly SPI I2C RS232 CICD DevOps
10+ yrs exp

Principal Security Lead Engineer

Amd

Santa Clara, CA 42 days ago $205,600–$308,400
Security Architecture Firmware SoC RTL Computer Architecture Pre-silicon Post-silicon System-level Modeling PSIRT CPU Security Graphics Architecture AI Tools Bring-up

Principal Software Engineer

General Dynamics

Oakton, VA 68 days ago $136,000–$184,000
C++ SQL Python Ruby Bash ETL Azure MongoDB NoSQL Data Warehouse Parallel Programming Agile Linux Data Structures Algorithms Design Patterns Profiling NUMA Memory Architecture
8+ yrs exp