Senior Database Modeler at Diné Development Corporation

, , United States -

Full Time

Start Date

Immediate

Expiry Date

04 Sep, 26

Salary

0.0

Posted On

06 Jun, 26

Experience

10 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Oracle Database Modeling, Oracle Label Security, Oracle Database Vault, PL/SQL, Virtual Private Database, Transparent Data Encryption, Oracle Data Redaction, Relational Database Design, Zero Trust Architecture, IL5 Security Compliance, Data Modeling, Performance Tuning, TCPS/TLS, JDBC Connection Pooling, Identity Management, Secrets Management

Industry

Executive Offices

Description

Dinè Source is seeking an expert Senior Database Modeler to design, implement, and maintain the highly secure Oracle database environment. The ideal candidate will be a subject matter expert in advanced Oracle security features and will be responsible for translating stringent Zero Trust and IL5 security requirements into a robust, scalable, and enforceable database architecture. You will be the primary steward of the database schema and its underlying security model, ensuring data is protected at every layer through sophisticated access controls and encryption. Responsibilities: Design, implement, and manage the logical and physical data models for the Oracle schema, ensuring alignment with strict security and performance requirements. Serve as the technical lead for implementing and enforcing multi-layered database security controls, with a primary focus on Oracle Label Security (OLS) and Oracle Database Vault (DV). Develop and maintain a secure data access layer, ensuring all application data access occurs exclusively through definer-rights PL/SQL packages and secured views. Create and configure Oracle Label Security (OLS) policies, including hierarchical security levels, data compartments, and organizational groups to enforce row-level data access. Establish and manage Database Vault (DV) realms and command rules to protect base tables and critical packages from unauthorized access, including privileged database administrator accounts. Implement Virtual Private Database (VPD/FGAC) policies as an additional layer of defense for filtering data based on session context. Collaborate closely with Java application developers to define the PL/SQL API contract for data access and to ensure the correct and secure propagation of end-user session context. Implement and configure data-at-rest encryption using Transparent Data Encryption (TDE) and column-level masking for PII using Oracle Data Redaction. Ensure the database design supports comprehensive and immutable auditing by integrating session context (CLIENT_IDENTIFIER, MODULE, ACTION) into all relevant policies and triggers. Uphold and contribute to the evolution of database security standards, ensuring ongoing compliance with Zero Trust and IL5 architectural principles. Performs other related duties as assigned. Qualifications: Must be a US citizen with the ability to obtain Public Trust clearance. Working experience as an Oracle Database Modeler, Database Architect, or a similar role in a security-focused environment. Deep, hands-on expertise with implementing and managing advanced Oracle security features, specifically: Oracle Label Security (OLS) Oracle Database Vault (DV) Proven track record of designing and building secure data access APIs using PL/SQL packages, stored procedures, and views. Strong proficiency in PL/SQL and a deep understanding of how to build a secure, definer-rights-based API layer. Expert knowledge of Oracle's session context mechanisms (SYS_CONTEXT, DBMS_SESSION) and their use in enforcing security policies. Solid understanding of relational database design principles and performance tuning. Familiarity with secure network connectivity concepts for databases (e.g., TCPS/TLS). Preferred Qualifications Experience designing database solutions for compliance with government or military security standards (e.g., DoD IL5, DISA STIGs). Practical experience applying Zero Trust security principles to a database environment. Hands-on experience with Oracle Transparent Data Encryption (TDE) and Oracle Data Redaction. Familiarity with high-availability Oracle solutions such as Real Application Clusters (RAC) or Data Guard. Understanding of application-level concerns, including JDBC connection pooling and the challenges of context management. Knowledge of enterprise identity management (e.g., Microsoft Entra ID) and secrets management solutions (e.g., HashiCorp Vault, CyberArk). About Us Diné Development Corporation (DDC) is a Navajo Nation owned family of companies that provides government agencies and commercial organizations with high-quality IT, professional, environmental, and research and development services. DDC is dedicated to empowering the Navajo Nation and communities we serve. Benefits Eligible full-time employees receive a comprehensive benefits package, including medical, dental, vision, life and disability coverage, retirement savings with company match, paid time off, voluntary supplemental benefits, and access to an employee assistance program. The package also includes educational assistance, with tuition reimbursement Equal Opportunity Statement This contractor and subcontractor shall abide by the requirements of 41 CFR 60‑1.4(a), 60‑300.5(a), and 60‑741.5(a). These regulations prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities, and prohibit discrimination against all individuals based on their race, color, religion, sex, sexual orientation, gender identity, national origin, or for inquiring about, discussing, or disclosing information about compensation, or any other basis prohibited by law. We participate in E‑Verify. DDC is committed to providing equal employment opportunities to all applicants and employees. If you require a reasonable accommodation to participate in the application or interview process, please contact Recruiting for assistance recruiting@ddc-dine.com

Responsibilities

Design and maintain a highly secure Oracle database environment aligned with Zero Trust and IL5 security requirements. Implement multi-layered security controls including Oracle Label Security, Database Vault, and secure PL/SQL APIs.