Principal Technical Program Manager

Oracle Health is seeking a Principal Technical Program Manager to establish and lead the Product Authorization Team responsible for FedRAMP assessment readiness, authorization strategy, and continuous security assurance for cloud service offerings. This role combines principal-level technical program leadership with deep cloud security and compliance-engineering expertise.

You will create the operating model that turns federal security requirements into sustainable engineering practices, trusted evidence, measurable security outcomes, and clear executive decisions. You will work at the intersection of cloud architecture, security engineering, product delivery, and federal authorization. Success requires the ability to move comfortably between architecture and control discussions, third-party assessment strategy, remediation execution, and senior-leadership tradeoffs.

This is a hands-on leadership role. You will not serve as the independent assessor; however, you must have sufficient security-engineering depth to challenge design assumptions, assess evidence quality, identify material gaps, and drive practical remediation with technical teams.

• Stand up the Oracle Health Product Authorization FedRamp Team and define its charter, service model, roles, intake and prioritization process, governance cadences, quality standards, metrics, and escalation paths.

• Own the multi-year FedRAMP authorization and certification roadmap for assigned cloud offerings, including scope, sequencing, authorization-path recommendations, dependencies, reuse opportunities, investment needs, and transition to continuous assurance.

• Establish a scalable assessment operating model for readiness reviews, authorization-boundary definition, evidence planning, package development, 3PAO engagement, testing, findings management, remediation validation, and post-authorization monitoring.

• Partner with architecture and security-engineering teams to evaluate service boundaries, data flows, interconnections, multi-tenancy, identity, encryption, logging, resilience, supply-chain dependencies, control inheritance, and customer-responsible controls.

• Translate FedRAMP, NIST, and federal risk-management requirements into owned, testable, time-bound engineering and operational deliverables; set acceptance criteria for evidence, security decisions, and remediation plans.

• Design reusable evidence and assurance patterns using security telemetry, infrastructure as code, CI/CD controls, configuration validation, GRC workflows, machine-readable data, and automation where appropriate.

• Lead strategic engagement with 3PAOs, FedRAMP and agency stakeholders, federal customers, advisors, and critical suppliers; resolve escalations involving scope, testing, evidence, findings, or schedule.

• Drive material risks, findings, and plans of action through root-cause analysis, prioritization, remediation, validation, risk acceptance, and closure; ensure decisions are documented and traceable.

• Establish executive dashboards and operating reviews that show authorization readiness, critical-path dependencies, evidence quality, open findings, vulnerability and change posture, staffing needs, and decisions required.

• Embed authorization obligations into secure software delivery, vulnerability management, incident response, change management, configuration management, contingency planning, and cloud operations.

• Create a continuous-monitoring and ongoing-certification model that keeps authorization information current, supports required reporting, and enables agencies to make informed risk decisions.

• Mentor TPMs and security partners, publish playbooks and reusable patterns, and raise the organization's capacity to deliver federal authorizations consistently without weakening security outcomes.

Minimum Qualifications

• Bachelor's degree in Computer Science, Engineering, Information Systems, Cybersecurity, or a related discipline, or equivalent practical experience.

• Seven or more years of experience in technical program management, security program leadership, cloud delivery, compliance engineering, security engineering, or a related technology field, including responsibility for complex cross-organizational programs.

• Demonstrated experience leading an end-to-end FedRAMP certification or authorization, federal Authority to Operate, or comparably complex regulated cloud-assurance program from strategy or readiness through assessment, remediation, decision, and ongoing monitoring.

• Deep working knowledge of FedRAMP authorization and certification processes; NIST SP 800-53 Rev. 5; FIPS 199; federal risk management; control implementation and assessment; control inheritance; significant change; vulnerability management; remediation; and continuous monitoring.

• Strong technical understanding of SaaS and IaaS architecture, including authorization boundaries, multi-tenancy, identity and access management, network segmentation, encryption and key management, logging and monitoring, secure software delivery, resilience, and supply-chain dependencies.

• Demonstrated ability to define operating models, governance, roadmaps, metrics, and executive decision mechanisms across Security, Engineering, Product, Operations, Compliance, Legal, and business organizations.

• Experience assessing technical evidence and communicating concrete security requirements to engineering teams, including cloud configuration, vulnerability, identity, logging, encryption, change, and incident-response evidence.

• Experience leading engagements and resolving complex issues with independent assessors, agencies, authorizing stakeholders, federal customers, or comparable external oversight bodies.

• Exceptional written, verbal, and executive communication skills, including the ability to translate technical and regulatory complexity into clear business risk, investment choices, and recommendations.

• Proven ability to influence senior leaders and technical teams, resolve competing priorities, and drive accountable decisions without direct organizational authority.

Preferred Qualifications

• Experience establishing or materially scaling a FedRAMP, product authorization, GRC, security-assessment, or continuous-assurance function.

• Experience with multiple FedRAMP Moderate or High authorizations, FedRAMP 20x certifications, authorization reuse, or a portfolio of federal cloud services.

• Experience designing compliance-as-code, automated evidence, persistent validation, Security Decision Records, Key Security Indicators, or machine-readable assurance programs integrated with engineering systems.

• Experience with OSCAL, GRC platforms, cloud security posture management, infrastructure as code, CI/CD security, security data analytics, or automated control validation.

• Strong hands-on experience in cloud and platform security across OCI, AWS, Azure, or another hyperscale cloud platform; working familiarity with Kubernetes or container security is highly desirable.

• Relevant certifications such as CISSP, CCSP, CISM, CRISC, PMP, a cloud security certification, or equivalent demonstrated experience.

• Experience supporting U.S. federal customers or cloud services subject to federal security, privacy, records-management, or health-data requirements.

Minimum Job Qualifications

Education and/or Experience:

11 years of experience as a Program Manager leading large technical programs or projects, development/implementation projects or experience managing complex cross-functional programs, from conception to delivery

OR

Bachelor’s Degree in Computer Science, Information Technology, Business Administration, Software Development, Electrical/Hardware Engineering, or related field AND 7 years of experience as a Program Manager leading large technical programs or projects, development/implementation projects or experience managing complex cross-functional programs, from conception to delivery

OR

Master's Degree in Computer Science, Information Technology, Business Administration, Software Development, Electrical/Hardware Engineering, or related field AND 5 years of experience as a Program Manager leading large technical programs or projects, development/implementation projects or experience managing complex cross-functional programs, from conception to delivery

OR

Doctorate in Computer Science, Information Technology, Business Administration, Software Development, Electrical/Hardware Engineering, or related field AND 3 year of experience as a Program Manager leading large technical programs or projects, development/implementation projects or experience managing complex cross-functional programs, from conception to delivery.

Job Skills:

Same skills as prior level plus;

Technical Leadership Demonstrated ability in or knowledge of technical leadership, including guiding teams and stakeholders to achieve project and strategic goals.

Client Relationship Management Demonstrated ability in or knowledge of client relationship management, including establishing and maintaining trusted client relationships and ensuring satisfaction.

Customer Service Demonstrated ability in or knowledge of customer service, including identifying and resolving customer needs and handling sensitive situations with diplomacy.

Customer Success Management Demonstrated ability in or knowledge of customer success management, including understanding customer business needs and tailoring solutions for successful outcomes.

Compliance Demonstrated knowledge of and adherence to regulatory, legal, and organizational compliance requirements.

Innovation Demonstrated ability in or knowledge of innovation, including generating or supporting new ideas, technologies, or processes for organizational growth.

Thought Leadership Demonstrated ability to provide thought leadership and drive adoption of best practices within teams or industry.

Cross-Functional Team Leadership Demonstrated experience successfully leading cross-functional teams in project or product delivery.

Cross-Functional/Team Collaboration Demonstrated ability in or knowledge of cross-functional collaboration, including working with stakeholders across teams or geographies to achieve common objectives.

Prioritization Demonstrated expertise in prioritizing tasks and projects to ensure efficient resource allocation.

Roadmap Management Demonstrated ability to create, communicate, and maintain actionable technology or product roadmaps in partnership with stakeholders.

Software Engineering Demonstrated proficiency in all phases of software engineering and development.

Quality Management Demonstrated ability to lead or contribute to quality management processes ensuring high-standard deliverables.

Preferred Job Qualifications

Education and/or Experience:

12 years of experience as a Program Manager leading large technical programs or projects, development/implementation projects or experience managing complex cross-functional programs, from conception to delivery

OR

Bachelor’s Degree in Computer Science, Information Technology, Business Administration, Software Development, Electrical/Hardware Engineering, or related field AND 8 years of experience as a Program Manager leading large technical programs or projects, development/implementation projects or experience managing complex cross-functional programs, from conception to delivery

OR

Master's Degree in Computer Science, Information Technology, Business Administration, Software Development, Electrical/Hardware Engineering, or related field AND 6 years of experience as a Program Manager leading large technical programs or projects, development/implementation projects or experience managing complex cross-functional programs, from conception to delivery

OR

Doctorate in Computer Science, Information Technology, Business Administration, Software Development, Electrical/Hardware Engineering, or related field AND 4 years of experience as a Program Manager leading large technical programs or projects, development/implementation projects or experience managing complex cross-functional programs, from conception to delivery.

Job Skills:

Oracle Product Knowledge: Demonstrated knowledge of Oracle products and the ability to educate customers on their effective use.

Budget Experience:

2 years of experience working with operating budgets and/or project financials.

Cloud Services Experience:

8 years of experience in a reputed Enterprise Cloud Services organization/experience working directly with large enterprise customers (i.e., Cerner systems, Oracle Cloud Infrastructure, cloud services, networking, SaaS products, scalable distributed backend services design with Cloud Native, and/or and systems development lifecycles).

Software Lifecycle Development Methodologies Experience:

5 years of experience using software development lifecycle methodologies (e.g., Agile, Scaled Agile Framework [SAFe]), practices and associated tooling.

Matrixed Organization Experience:

6 years of experience in leading cross-functional and cross-level matrixed teams to achieve project goals.

Stakeholder Facilitation Experience:

3 years of experience in facilitating large meetings and driving consensus among diverse stakeholders.

Presentation Experience:

3 years of experience in communicating program status, end-to-end delivery, and results to leadership.

Industry Experience:

2 years of experience in relevant industry (e.g., cloud development, cloud operations, policy, risk, healthcare, financial, logistics, HR, regulatory compliance, or information technology [IT]).

Data Analysis Experience:

5 years of experience in data analysis and reporting.

Project Management and Delivery Certifications:

Project management and delivery certifications, e.g., Certified Scrum Master (CSM) from Scrum Alliance, Project Management Professional (PMP) certification from the Project Management Institute (PMI), Lean Six Sigma Black Belt Certification, ITIL Information Technology Infrastructure Library.

Software Development and Implementation Experience:

3 years of experience in software development, software development management, or software implementation consulting projects.