Sr. Staff Systems Engineer (Fedramp)
Palo Alto Networks3 days ago
USA (city not specified)Staff+
Base Salary
$154k - $249k/yr
Responsibilities
- Architect and maintain Infrastructure as Code automation using Terraform and Ansible across GCP and GCP Assured Workloads.
- Build and harden secure CI/CD pipelines with static analysis, container scanning, vulnerability gates, and artifact provenance signing.
- Operate and scale GKE and Kubernetes clusters with network isolation, pod security, mutual TLS, and role-based access controls.
- Automate NIST SP 800-53 and DoD Cloud Computing SRG IL5 controls, continuous monitoring evidence, and POA&M remediation.
- Maintain monitoring, audit logging, alerting, and telemetry frameworks using Google Cloud Operations Suite and BigQuery.
- Implement zero-trust identity and privileged access architectures using Cloud IAM, IAP, VPC Service Controls, and CAC/PIV authentication.
- Execute change governance, blue/green and canary deployments, incident response, internal enablement, mentoring, and on-call operations.
Requirements
- 8+ years of experience in DevOps, Site Reliability Engineering, or Systems Engineering supporting complex, highly regulated cloud environments.
- Deep hands-on experience with GCP, including GCP Assured Workloads, Cloud IAM, and VPC Service Controls.
- Expertise operating GKE or Kubernetes clusters in mission-critical production environments.
- Advanced proficiency with Terraform and configuration management tools such as Ansible.
- Strong experience configuring and securing enterprise CI/CD pipelines with integrated security testing.
- Experience implementing FedRAMP Moderate/High, NIST SP 800-53, and/or DoD Cloud Computing SRG IL4/IL5 controls.
- Fluency in Python and Bash for operational scripting and systems automation.
- Experience with formal IT change management frameworks and enterprise ticketing systems.
- U.S. citizenship and ability to pass background checks and security investigations required for DoD IL5 and federal boundary access.
- Preferred qualifications include Google Cloud Professional Cloud DevOps Engineer or Professional Cloud Security Engineer certification, Certified Kubernetes Administrator certification, BigQuery familiarity, Anthos Service Mesh experience, and Golang or Rust experience.
Benefits
- Most teams work from the office full time, with flexibility when needed.
- The role includes an on-call rotation supporting critical FedRAMP cloud infrastructure.
- Compensation may include restricted stock units and a bonus in addition to base salary.
- The company provides reasonable accommodations and equal employment opportunity protections.
Tech Stack
Categories
About Palo Alto Networks
Palo Alto Networks builds cybersecurity products for enterprises and governments, including next-generation firewalls, cloud security (Prisma Cloud/Prisma Access), and SOC tools (Cortex). It sells subscriptions and appliances with cloud-delivered threat intelligence, securing networks, endpoints, and applications across data centers and public clouds. Founded in 2005 and headquartered in Santa Clara, California, the company is publicly traded on the NYSE under the ticker PANW.