FedRAMP Senior DBA

Role Overview

The Senior Database Administrator (DBA) within the CCOE Database Services Team is responsible for the design, availability, performance, security, compliance, automation, and ongoing support of IFS cloud database platforms. The role serves as the technical authority for database services, providing escalation support, driving operational excellence, ensuring FedRAMP compliance, and building automated, scalable database solutions that support IFS Cloud customers.

This position partners closely with Unified Support, R&D, Solution Architects, Security, Networking, Automation, and Cloud Operations teams to deliver highly available, secure, and resilient database services while continuously improving platform capabilities and customer experience.

This role supports U.S. federal government cloud environments and is subject to customer security and compliance requirements. Candidates must be authorized to work in the United States and must be willing and eligible to undergo a background investigation (including a Public Trust or equivalent screening) if required by the customer. Certain assignments may require U.S. citizenship, lawful permanent resident status, or eligibility to obtain and maintain a government security clearance, depending on customer, contractual, or regulatory requirements.

Key Responsibilities

Database Platform Ownership

• Own the design, implementation, support, availability, security, and performance of mission-critical database platforms supporting IFS Cloud.
• Act as senior DBA escalation point for complex customer and platform issues.
• Design and document operational processes used by Unified Support teams.
• Collaborate with R&D to improve database architecture and future product releases.
• Deliver database expertise to both cloud and on-premises customers.

Oracle Database Administration

• Administer and support Oracle 19c+ environments on Linux.
• Manage Oracle RAC, ASM, Exadata (Oracle@Azure / Exadata Cloud@Customer), Data Guard, GoldenGate, RMAN, OEM, and Oracle multitenant (CDB/PDB) environments.
• Perform database upgrades, patching, cloning, backup/recovery, and disaster recovery testing.
• Troubleshoot complex database performance issues using AWR, ASH, ADDM, TKPROF, tracing, and OEM tools.

FedRAMP Compliance & Security

• Ensure database environments comply with FedRAMP and NIST SP 800-53 Rev 5 controls.
• Maintain audit evidence, POA&M documentation, compliance artifacts, and configuration baselines.
• Support annual assessments, ATO activities, Continuous Monitoring (ConMon), and auditor reviews.
• Coordinate remediation activities with Security and ISSO teams.

Security Hardening

• Implement and maintain Oracle STIG and CIS Benchmark hardening standards.
• Configure Oracle Unified Auditing aligned to NIST controls.
• Administer encryption technologies including:
  • Oracle TDE
  • Network Encryption / TLS
  • Backup encryption
• Manage privileged access through PAM tooling such as Azure PIM.
• Enforce MFA and least-privilege access principles.
• Support emergency access procedures and audit logging requirements.

Vulnerability & Patch Management

• Respond to security vulnerabilities within FedRAMP remediation timelines.
• Coordinate Oracle Quarterly Patching (CPU/PSU).
• Maintain compliant change management records and evidence.
• Support vulnerability scanning and remediation activities.

Incident Response & Compliance Investigations

• Participate in security incident investigations.
• Perform database forensics, audit trail preservation, and evidence collection.
• Support US-CERT/CISA reporting requirements where applicable.
• Participate in tabletop exercises and incident response planning.

Backup, Recovery & Disaster Recovery

• Design and support enterprise backup and recovery solutions.
• Ensure DR solutions satisfy both business and FedRAMP requirements.
• Regularly validate recovery procedures and disaster recovery testing.
• Maintain recovery documentation and SSP compliance artifacts.

Monitoring & Availability

• Implement monitoring frameworks and alerting solutions.
• Support monitoring platforms including Nagios, Prometheus, ELK, OEM, and Azure-native tools.
• Design operational processes to maintain database availability and platform reliability.

Automation & Tooling

• Drive automation initiatives across database administration activities.
• Develop Bash scripting and automation solutions to reduce operational overhead.
• Collaborate with DevOps and Automation teams on CI/CD and infrastructure automation initiatives.
• Improve platform reliability through engineering-led automation and standardization.

Knowledge Sharing

• Deliver training and DBA knowledge transfer sessions.
• Support technical upskilling across internal support and operations teams.
• Maintain technical documentation and operational runbooks.