Sr Principal DevSecOps Engineer (Prisma Cloud)

Company Description

Our Mission

At Palo Alto Networks® everything starts and ends with our mission:

Being the cybersecurity partner of choice, protecting our digital way of life.

Our vision is a world where each day is safer and more secure than the one before. We are a company built on the foundation of challenging and disrupting the way things are done, and we’re looking for innovators who are as committed to shaping the future of cybersecurity as we are.

Our Approach to Work

We lead with flexibility and choice in all of our people programs. We have disrupted the traditional view that all employees have the same needs and wants. We offer personalization and offer our employees the opportunity to choose what works best for them as often as possible - from your wellbeing support to your growth and development, and beyond!

Job Description

Your Career

As a Senior Principal DevSecOps Engineer in the Prisma Cloud team, you will be responsible for the design and development of innovative security solutions for protecting data deployed into the cloud. You’ll closely collaborate with Site Reliability Engineers, software developers, and QA to ensure that we’re building security into all aspects of the product. Being hands-on and diving into complex technical issues is how you’ll help ensure the security of our products and services

Your Impact

• Through close collaboration with teams, ensure the adoption of cloud security best practices across the entire application lifecycle. You’re someone that possesses strong knowledge of security from infrastructure through application and wants to help people apply it

• Help coordinate and drive compliance efforts such as FedRAMP, PCI-DSS, MLPS, IRAP, and SOC2. While you’re not necessarily an expert in all compliance domains, you’ve designed controls and helped see them through implementation

• Improve security reporting, including coordinating vulnerability management, penetration testing, and infrastructure compliance. You want to share the overall security story including the use of dashboards and ensure that deviance from the norm is visible and acted upon appropriately

• Define and implement security tooling with the goal of improving coverage and time to action. Many security tools exist both here and in the wild, but you’ll define the portfolio and ensure adoption of the right set for us

Qualifications

Your Experience

• 8+ years of hands-on experience in cloud security

• Security tooling and best practices, such as pre-commit/pre-receive hooks, dependency scanning, SAST, vulnerability management, and CI/CD through GitLab or other tools

• Experience in software security testing, methodologies, and frameworks

• Integration, design, and architecture of AWS, Azure, and/or GCP based products

• Microservice architecture expertise and best practices in securing APIs across multi-cloud environments

• Identity & access management experience

• Ensuring CIS best practices 

• Expertise in software development using Python or Golang

• Hands-on experience in container-based deployments and orchestration tools (e.g. Kubernetes, Docker, EKS, GKE, Helm, Terraform)

• Hands-on experience in cloud network security and next generation firewalls (Palo Alto Networks NGFW expert level knowledge and skill are a big plus)

• Contributions to open-source tools, particularly security tools a plus

Additional Information

The Team

The DevOps team within Prisma Cloud is responsible for the scaling and support of our multi-region, multi-cloud application. We’re a group of software engineers, site reliability engineers, and security experts that own the deployment architecture and strive to improve our infrastructure through deep partnership with other teams across the organization.

Our Commitment

We’re trailblazers that dream big, take risks, and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together.

We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at accommodations@paloaltonetworks.com.

Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical