Principal DevSecOps Engineer

$146,000 - $237,500/Yr

Palo Alto Networks - Santa Clara, CA

Full-time - Principal

Santa Clara, CA

Professional, Scientific, and Technical Services

About the position

The Principal DevSecOps Engineer at Palo Alto Networks is a key role responsible for securing and delivering security for the company's Enterprise, SaaS, and Public Cloud security services. This position involves building, maintaining, and scaling critical security production services in a Google Cloud Platform environment, while collaborating with various teams to implement DevSecOps principles and enhance operational readiness. The role requires a hands-on engineer with strong knowledge in cloud security architecture and experience in DevOps automation.

Responsibilities

• Build, maintain, and scale production services in government cloud environments across Enterprise, FedRAMP, and DoD.
• Implement security capabilities and services to protect Palo Alto Networks enterprise and hosting environments.
• Write automation code for provisioning and operating infrastructure at massive scale.
• Partner with the Reliability Engineering team to create and apply DevSecOps principles and processes.
• Collaborate with application developers and database administrators to deliver solutions to technology challenges.
• Counsel project teams and application owners on information security controls.
• Work with development teams to ensure applications are designed for scalability and reliability.
• Participate in on-call schedule to troubleshoot incidents and fix production issues.
• Conduct postmortem reviews and provide remediation recommendations.
• Document implementations through technical documentation and run-books.
• Provide operational support and engineering for large distributed security services.

Requirements

• Minimum of 5 years industry experience with at least 3 years in DevOps automation and tooling, including cloud security.
• Strong knowledge of cloud security architecture, web application security, vulnerability management, and security engineering.
• Strong debugging, troubleshooting, and observability skills.
• Experience with infrastructure-as-code (IAC) in a controlled environment and full lifecycle configuration management.
• Experience with GCP (preferred) or AWS, and containerized environments (Kubernetes).
• Ability to leverage DevOps/DevSecOps tools for building and maintaining a cloud-based security orchestration platform.
• Experience in developing automated security and compliance capabilities in large-scale cloud environments.
• Ability to troubleshoot and resolve systems or networking issues quickly.
• Experience in collecting metrics and interpreting data for decision-making.
• Team-oriented with strong collaboration skills.

Nice-to-haves

• Experience handling US federal government project deliverables.
• Ability to multitask and prioritize multiple issues.
• Experience in creating design specifications and preparing technical documentation.

Benefits

• FLEXBenefits wellbeing spending account with over 1,000 eligible items.
• Mental and financial health resources.
• Personalized learning opportunities.
• Restricted stock units and bonuses as part of compensation.