Senior Staff DevSecOps Engineer (Information Security)

Company Description

This position requires the candidate must be a USC / Green card holder

Our Mission

At Palo Alto Networks® everything starts and ends with our mission:

Being the cybersecurity partner of choice, protecting our digital way of life.

We have the vision of a world where each day is safer and more secure than the one before. These aren’t easy goals to accomplish – but we’re not here for easy. We’re here for better. We are a company built on the foundation of challenging and disrupting the way things are done, and we’re looking for innovators who are as committed to shaping the future of cybersecurity as we are.

We’re changing the nature of work. Palo Alto Networks is evolving to meet the needs of our employees now and in the future through FLEXWORK, our approach to how we work. From benefits to learning, location to leadership, we’ve rethought and recreated every aspect of the employee experience at Palo Alto Networks.  And because it FLEXes around each individual employee based on their individual choices, employees are empowered to push boundaries and help us all evolve, together.

Job Description

Your Career

Palo Alto Networks is disrupting the Cyber Security industry!  We’re definitely not business-as-usual and that goes for the talent we hire.  We’re looking for a Senior Staff DevSecOps Engineer to join our InfoSec team that owns the process of securing and delivering security for our Enterprise, SaaS, and Public Cloud security services.  With your mad DevSecOps skills, you’ll build, maintain and scale highly critical, security production services in a Google Cloud Platform environment as well as collaborate with other team members. You won’t see this in most InfoSec teams in the industry and this highly visible position will help drive our goal to continue being a powerful, disruptive force in Cyber Security.

Your Impact 

• Build, maintain, and scale production services in govt cloud environments for both FedRAMP and DoD
• Better understanding of federal government systems adaptability, process and its maintenance
• Implement security capabilities and security services to protect Palo Alto Networks enterprise and hosting environments
• Write automation code for provisioning and operating infrastructure at massive scale
• Partner with Reliability Engineering team to create, implement and apply DevSecOps principles, processes and culture that are consumed by delivery teams
• Collaborate with application developers and database administrators to deliver creative solutions to difficult technology challenges and business requirements
• counsel project teams, application owners, and other product team members on information security controls
• Work with development teams to make sure the applications fit nicely within the infrastructure and scalability/reliability is designed and implemented from the ground up
• Troubleshoot incidents, formulate theories and test your hypothesis, and narrow down possibilities to find the root cause
• Postmortem reviews and remediation recommendation
• Own responsibility for the thorough documentations of implementations, via technical documentation and run-books
• Provide primary operational support and engineering for multiple large distributed security services

Qualifications

Your Experience

• You’re a hands-on engineer who leads by doing
• Strong knowledge of cloud security architecture, web application security, Vulnerability management, and security engineering
• Strong debugging, troubleshooting and observability skills
• You have a minimum of 5 years industry experience with at least 3 years experience in DevOps automation and tooling, including cloud security and will be good to have minimum 2 years of experience of handling US federal government project deliverables
• Experienced in building and releasing infrastructure-as-code (IAC) in a controlled environment with an understanding of full lifecycle configuration management
• Experience with GCP (preferred) or AWS, and also containerized environments (Kubernetes) 
• You can leverage DevOps/DevSecOps tools to build, harden, maintain and instrument a comprehensive cloud-based security orchestration platform to be consumed in product CI/CD pipelines (Gitlab, Ansible, Terraform, Puppet...)
• Developed automated security and compliance capabilities in support of DevOps processes in a large-scale cloud computing environments
• Integrate security practices across a continuous delivery pipeline to provide a comprehensive automated cloud and application security solution
• Ability to troubleshoot, isolate and resolve issues related to systems or networking quickly
• Experience collecting metrics, mea