This role pays less than
82%
of similar roles. Most pay
$174,271–$213,756
— the shaded band above.
At the midpoint, this role pays about
$154k
versus about
$194k
for comparable roles.
Based on 240 similar postings.
Employer
About Oracle
Oracle Corporation is a leading multinational technology company specializing in database software, cloud computing, and enterprise software.
Oracle currently has
528 open roles
on FindRole.
Listed pay typically runs
$102,300–$209,500
across 416 roles with salary data.
As a Principal Technical Program Manager within Oracle Health, you will establish and lead the Product Authorization Team to manage FedRAMP assessment readiness, authorization strategy, and continuous security assurance for cloud service offerings. You will build the operating model that translates federal security requirements into sustainable engineering practices, while managing multi-year certification roadmaps and coordinating with third-party assessors. Your daily work involves collaborating with architecture and security teams to evaluate data flows, encryption, and identity management. You will utilize tools and methodologies including NIST SP 800-53, FIPS 199, infrastructure as code, CI/CD controls, and GRC workflows. This role solves the complex challenge of aligning cloud architecture with federal compliance requirements, ensuring that security telemetry and automated evidence collection support consistent authorization for high-stakes cloud products while maintaining robust technical integrity across all service boundaries.
What does a Technical Program Manager earn?
Median $190350 from 179 postings across 31 companies.
Establish and lead the Product Authorization Team to manage FedRAMP assessment readiness and continuous security assurance.
Develop a multi-year roadmap for FedRAMP authorization, including scope, sequencing, and transition to continuous monitoring.
Create an operating model that translates federal security requirements into automated engineering practices and measurable outcomes.
Partner with engineering teams to evaluate cloud architecture, data flows, encryption, and identity management against federal standards.
Translate complex NIST and FedRAMP requirements into testable, time-bound technical deliverables for development teams.
Design reusable evidence patterns using infrastructure as code, CI/CD controls, and automated security telemetry.
Manage relationships with 3PAOs, federal agencies, and stakeholders to resolve issues regarding scope, findings, and schedules.
Drive the remediation of material risks through root-cause analysis and formal risk acceptance processes.
What we're looking for
Bachelor's degree in Computer Science, Engineering, Information Systems, Cybersecurity, or a related discipline, or equivalent practical experience.
Seven or more years of experience in technical program management, security program leadership, cloud delivery, compliance engineering, or a related technology field.
Demonstrated experience leading an end-to-end FedRAMP certification, federal Authority to Operate, or comparable complex regulated cloud-assurance programs.
Deep working knowledge of FedRAMP processes, NIST SP 800-53 Rev. 5, FIPS 199, and federal risk management.
Strong technical understanding of SaaS and IaaS architecture including identity management, encryption, network segmentation, and supply-chain dependencies.
Demonstrated ability to define operating models, governance, roadmaps, and executive decision mechanisms across multiple business organizations.
Experience assessing technical evidence and communicating complex security requirements to engineering teams.
Exceptional written, verbal, and executive communication skills to translate regulatory complexity into business risk and recommendations.
Experience leading engagements with independent assessors, agencies, and federal customers (preferred).
Experience scaling FedRAMP functions or designing compliance-as-code and automated evidence programs (preferred).
Relevant certifications such as CISSP, CCSP, CISM, CRISC, PMP, or a cloud security certification (preferred).