Sr. Systems Engineer; Fedramp

At Palo Alto Networks®, we’re united by a shared mission—to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you’re ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you’re in the right place.

In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values:
Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us!

We believe collaboration thrives in person. That’s why most of our teams work from the office full time, with flexibility when it’s needed. This model supports real-time problem-solving, stronger relationships, and the kind of precision that drives great outcomes.

As a Sr. Staff Systems Engineer (FedRAMP), you will be a senior technical leader in our Engineering & Infrastructure organization and the operational backbone of our automated cloud platforms across strictly governed public sector boundaries. You will have technical ownership over our automated infrastructure, deployment pipelines, and container platforms—challenged to design, harden, and scale systems across our FedRAMP environments. This role provides a unique opportunity to work cross-functionally with Information Security, R&D, and FedRAMP Production Operations teams, placing you at the critical intersection of advanced Dev Ops systems engineering, cloud automation, and defense-grade compliance strategy.

• Infrastructure as Code & Enclave Automation: Architect, deploy, and maintain modular Infrastructure as Code (IaC) using Terraform and Ansible across Google Cloud Platform (GCP) and GCP Assured Workloads, enforcing consistent baseline configurations across all FedRAMP boundaries.
• Secure CI/CD Pipeline Architecture: Build, manage, and harden automated CI/CD pipelines to support zero-trust software delivery, integrating static analysis, automated container image scanning, vulnerability gates, and automated artifact provenance signing.
• Container Orchestration & Workload Hardening: Manage, optimize, and scale production Google Kubernetes Engine (GKE) clusters, enforcing strict network isolation, zero-trust pod security standards (PSS/PSA), mutual TLS, and role-based access controls within defense enclaves.
• Security & Compliance Control Automation: Act as a critical technical bridge to Information Security and FedRAMP compliance teams by automating technical controls for NIST SP 800-53 and DoD CC SRG IL5, generating programmatic Continuous Monitoring (Con Mon) evidence, and driving rapid POA&M remediation.
• Production Telemetry & Observability: Design and maintain unified monitoring, centralized audit logging, and proactive alerting frameworks across all boundary enclaves utilizing Google Cloud Operations Suite (Cloud Logging, Cloud Monitoring) and Big Query to maintain audit readiness and operational health.
• Privileged Boundary Access & Identity Governance: Implement and uphold zero-trust identity architectures within FedRAMP boundaries, leveraging GCP Cloud IAM, Identity-Aware Proxy (IAP), VPC Service Controls, and hardware-backed multi-factor authentication (CAC/PIV tokens).
• Change Governance & Release Resilience: Apply formal change management procedures to deployment…