Principal DevSecOps Engineer

$146,000 - $237,500/Yr

Palo Alto Networks - Santa Clara, CA

Full-time - Senior

Santa Clara, CA

Professional, Scientific, and Technical Services

About the position

The Principal DevSecOps Engineer at Palo Alto Networks is a pivotal role within the Information Security team, responsible for securing and delivering security for Enterprise, SaaS, and Public Cloud security services. This position involves building, maintaining, and scaling critical security production services in a Google Cloud Platform environment, while collaborating with various teams to implement DevSecOps principles and enhance security capabilities across the organization.

Responsibilities

• Build, maintain, and scale production services in government cloud environments across Enterprise, FedRAMP, and DoD.
• Implement security capabilities and services to protect Palo Alto Networks enterprise and hosting environments.
• Write automation code for provisioning and operating infrastructure at massive scale.
• Partner with the Reliability Engineering team to create and apply DevSecOps principles and processes.
• Collaborate with application developers and database administrators to deliver solutions to technology challenges.
• Counsel project teams and application owners on information security controls.
• Ensure applications fit within the infrastructure and are designed for scalability and reliability.
• Participate in on-call schedule to troubleshoot incidents and fix production issues.
• Conduct postmortem reviews and provide remediation recommendations.
• Document implementations thoroughly via technical documentation and run-books.
• Provide operational support and engineering for multiple large distributed security services.

Requirements

• Minimum of 5 years industry experience with at least 3 years in DevOps automation and tooling, including cloud security.
• Strong knowledge of cloud security architecture, web application security, vulnerability management, and security engineering.
• Strong debugging, troubleshooting, and observability skills.
• Experience with infrastructure-as-code (IAC) in a controlled environment and full lifecycle configuration management.
• Experience with GCP (preferred) or AWS, and containerized environments (Kubernetes).
• Ability to leverage DevOps/DevSecOps tools for building and maintaining a cloud-based security orchestration platform.
• Experience in developing automated security and compliance capabilities in large-scale cloud environments.
• Ability to troubleshoot and resolve systems or networking issues quickly.
• Experience in collecting metrics and interpreting data for decision-making.
• Team-oriented with strong collaboration skills.

Nice-to-haves

• Good to have experience with handling US federal government project deliverables.

Benefits

• FLEXBenefits wellbeing spending account with over 1,000 eligible items.
• Mental and financial health resources.
• Personalized learning opportunities.