on install of the Oracle softaware you could set the sysdba groups and sysoper group to be that of this HR user and then create this database under that Oracle home.

Why would yu not want your dba's to log onto this database? how are they going to fix it if it goes down?