Senior Staff Systems Engineer, FedRAMP & Cloud Automation

Palo Alto Networks; California; On-site; USD 154,000 - 249,000; Full time

Job summary

Palo Alto Networks is seeking a Sr. Staff Systems Engineer (FedRAMP) to lead automated cloud infrastructure across FedRAMP boundaries, owning IaC and deployment pipelines in GCP.

You will harden and scale systems, collaborate with Information Security, R&D, and FedRAMP Production Operations to align with defense-grade compliance. You will architect secure CI/CD pipelines, manage GKE clusters with zero-trust and strong identity controls, and drive monitoring and incident response across regulated

Qualifications

• 8+ years of experience in DevOps, SRE, or Systems Engineering for regulated cloud environments.
• Deep hands-on experience provisioning and securing GCP, including Assured Workloads and IAM.
• Experience with GKE/Kubernetes in production and security-focused deployments.
• Proficiency in Terraform and configuration management tooling (e.g., Ansible).
• Experience building secure CI/CD pipelines with integrated security testing.

Responsibilities

• Architect, deploy, and maintain IaC across GCP FedRAMP environments.
• Build and harden CI/CD pipelines with security gates and artifact signing.
• Manage and scale GKE clusters with strict network isolation and zero-trust controls.
• Automate security controls and generate Continuous Monitoring evidence for FedRAMP/DoD.
• Design unified observability and alerting across boundary enclaves using Google Cloud tools.
• Implement identity governance with IAM, IAP, and hardware-backed MFA.
• Lead change governance and incident response for production outages.

Skills

DevOps/SRE experience

GCP expertise

GKE / Kubernetes

Terraform

Ansible

CI/CD security

Python & Bash

ITSM & Change Control

FedRAMP/NIST

Tools

Terraform

Ansible

Job description

Palo Alto Networks is seeking a Sr. Staff Systems Engineer (FedRAMP) to lead automated cloud infrastructure across FedRAMP boundaries, owning IaC and deployment pipelines in GCP.

You will harden and scale systems, collaborate with Information Security, R&D, and FedRAMP Production Operations to align with defense-grade compliance. You will architect secure CI/CD pipelines, manage GKE clusters with zero-trust and strong identity controls, and drive monitoring and incident response across regulated