Description

Investec is looking for a Oracle Cloud Engineer to build, and operate a secure, compliant, and scalable Oracle Cloud Infrastructure (OCI) foundation by supporting the OCI Landing Zone, governance guardrails, and Infrastructure as Code (IaC) patterns, ensuring cloud environments are production‑ready, policy‑driven, and aligned to enterprise and regulatory standards.

Key Responsibilities

•    Design, implement, and evolve the OCI Landing Zone in line with enterprise cloud principles.
•    Define standard OCI tenancy structures, compartments, identity domains, networking, and shared services.
•    Establish repeatable account/compartment vending processes for new workloads and teams.
•    Maintain reference architectures for OCI IaaS and PaaS workloads.
•    Build and maintain reusable, versioned Terraform modules for OCI infrastructure.
•    Enforce IaC only provisioning principles (no manual drift).
•    Design CI/CD pipelines for plan/apply, validation, security scanning, and policy checks.
•    Implement state management, promotion strategies, and change controls for environments.
•    Implement and manage OCI guardrails including: 
•    IAM policies and least privilege access
•    Network segmentation and security lists / NSGs
•    Tagging and cost management standards
•    Resource quotas and service limits
•    Integrate policy as code and automated compliance checks.
•    Embed architectural and security guardrails into provisioning workflows.
•    Support audit, risk, and regulatory evidence requirements.
•    Partner with Information Security to embed security by design.
•    Implement OCI native security services (e.g. Cloud Guard, Bastion, Vault, Logging).
•    Integrate with centralised systems (e.g. WIZ, Splunk, Beyondtrust) 
•    Ensure encryption, key management, identity federation, and secure access patterns.
•    Contribute to threat modelling, risk assessments, and remediation initiatives.
•    Design and implement OCI networking patterns including VCNs, DRGs, routing, and segmentation.
•    Integrate OCI with on prem and other cloud platforms.
•    Ensure network designs meet performance, resilience, and security requirements.
•    Define day 2 operational patterns for OCI foundations.
•    Produce runbooks, support models, and handover artefacts to CloudOps.
•    Support incident investigations, root cause analysis, and platform improvements.
•    Ensure environments meet resilience, backup, and DR expectations.
•    Provide enablement to engineering teams consuming OCI.
•    Create documentation, patterns, and “how to” guides.
•    Act as a trusted advisor to architects and delivery teams on OCI design choices.
•    Contribute to internal cloud standards, blueprints, and practice communities.

Qualifications, Experience and Skills

•    OCI Landing Zone implemented and maintained, including tenancy, compartments, IAM, networking, logging, and shared services.
•    Standardized, reusable Terraform modules published, versioned, and consumed by delivery teams.
•    Automated environment provisioning with embedded governance and security guardrails.
•    Documented OCI reference architectures aligned to enterprise standards.
•    Implemented cloud guardrails covering identity, network security, tagging, cost controls, and service quotas.
•    CI/CD pipelines for OCI infrastructure with validation, policy enforcement, and auditability.
•    Operational artefacts include runbooks, diagrams, support models, and escalation paths.
•    Audit and compliance evidence for OCI environments.
•    Enablement materials and onboarding guidance for teams adopting OCI.
•    Continuous improvement backlog for OCI platform evolution.
•    Strong hands-on experience with Oracle Cloud Infrastructure (OCI). 
•    Deep understanding of OCI: 
•    Tenancies, compartments, identity domains
•    OCI networking (VCNs, DRGs, routing, security)
•    Compute, Storage, and core OCI services
•    Strong Terraform expertise (at scale, multi environment). 
•    Experience implementing cloud landing zones and governance frameworks. 
•    Solid understanding of cloud security, IAM, networking, and compliance. 
•    Experience in integrating cloud platforms into hybrid environments. 
•    Familiarity with CI/CD pipelines for infrastructure. 
•    Working knowledge of FinOps principles and cloud cost management.

What We Value

At Investec we seek creative, talented people with passion, energy and stamina, who collaborate unselfishly.

We are committed to diversity and inclusion when recruiting internally and externally.