Senior FedRAMP Systems Engineer - Cloud & CI/CD Lead

Palo Alto Networks; Santa Clara (CA); On-site; USD 154,000 - 249,000; Full time

Job summary

Palo Alto Networks is seeking a Sr. Staff Systems Engineer (FedRAMP) to lead the automated cloud platforms across strictly governed public sector boundaries.

You will own the automated infrastructure, deployment pipelines, and container platforms, collaborating with Information Security, R&D, and FedRAMP Production Operations to design, harden, and scale systems for defense-grade compliance. You will architect IaC, secure CI/CD, and production GKE clusters, enforcing zero-trust standards and

Qualifications

• 8+ years of experience in DevOps, SRE, or Systems Engineering for regulated cloud environments.
• GCP expertise with Assured Workloads, Cloud IAM, and VPC Service Controls.
• Experience architecting and operating GKE/Kubernetes in production.
• IaC proficiency with Terraform and Ansible.
• CI/CD pipelines with integrated security testing.
• Experience aligning to FedRAMP Moderate/High and/or DoD SRG IL4/IL5.
• Proficient in Python and Bash for automation.
• Experience with ITSM/change control processes.
• U.S. Citizenship with ability to pass background checks and security investigations.

Responsibilities

• Architect and maintain IaC across GCP FedRAMP boundaries with Terraform/Ansible.
• Design secure CI/CD pipelines with zero-trust controls and image scanning.
• Operate and harden GKE clusters with strict network isolation and PSS/PSA.
• Automate security controls for NIST SP 800-53 and DoD SRG IL5.
• Design unified monitoring and audit logging across enclaves using Cloud Operations.
• Implement zero-trust identity with IAM, IAP, and CAC/PIV tokens.
• Lead change governance, blue/green and canary deployments; drive incident response.
• Provide self-service automation tooling and mentorship to junior engineers.
• Participate in on-call rotation to support FedRAMP cloud infrastructure.

Skills

DevOps / SRE / Systems Eng experience

GCP expertise

GKE / Kubernetes

Terraform & Ansible IaC

CI/CD security

FedRAMP / NIST compliance

Python & Bash scripting

ITSM & Change Control

U.S. Citizenship & clearance

Tools

Terraform

Ansible

GCP

GKE

BigQuery

IAP

VPC Service Controls

CAC/PIV tokens

Job description

Palo Alto Networks is seeking a Sr. Staff Systems Engineer (FedRAMP) to lead the automated cloud platforms across strictly governed public sector boundaries.

You will own the automated infrastructure, deployment pipelines, and container platforms, collaborating with Information Security, R&D, and FedRAMP Production Operations to design, harden, and scale systems for defense-grade compliance. You will architect IaC, secure CI/CD, and production GKE clusters, enforcing zero-trust standards and