Sr. Software Engineer; Fedramp

At Palo Alto Networks®, we're united by a shared mission—to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you're ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you're in the right place.

In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values:
Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us!

We believe collaboration thrives in person. That's why most of our teams work from the office full time, with flexibility when it's needed. This model supports real-time problem-solving, stronger relationships, and the kind of precision that drives great outcomes.

As an Sr. Staff Software Engineer (FedRAMP), you will be a critical part of our Engineering team, serving as the technical backbone for our web applications and platform services across strictly governed public sector boundaries. You will be responsible for designing, building, and maintaining secure, scalable full-stack applications—from intuitive, modern frontend interfaces to resilient backend APIs and microservices—while strengthening our security posture across FedRAMP environments.

Working closely with Information Security, R&D, Dev Ops, and internal Support teams, you will combine hands-on full-stack development with rigorous compliance standards to ensure high availability, auditability, and performance across our platform.

• Full-Stack Application Development:
  Design, develop, test, and maintain secure, responsive frontend interfaces and high-performance backend microservices across governed cloud boundaries.
• Secure Coding & Enclave Governance:
  Author clean, maintainable code adhering to OWASP, NIST SP 800-53, and Secure Software Development Framework (SSDF) standards to enforce zero-trust architecture across FedRAMP enclaves.
• API & Cloud-Native Architecture:
  Architect, build, and optimize RESTful and gRPC APIs and containerized microservices hosted on Google Cloud Platform (GCP) and Google Kubernetes Engine (GKE).
• Data & State Management:
  Design, query, and optimize relational and non-relational database schemas and caching layers utilizing GCP database services (e.g., Cloud SQL, Cloud Spanner, Big Query) with strict data isolation and auditing.
• AI-Augmented SDLC & Velocity:
  Strategically leverage modern AI developer tools and LLM-assisted workflows (e.g., code synthesis, test scaffolding, automated refactoring, and documentation generation) to accelerate delivery cycles and engineering productivity, while ensuring strict adherence to boundary data security and code governance policies.
• CI/CD Pipeline Security Integration:
  Collaborate with Dev Ops teams to secure the software supply chain, integrating automated static and dynamic security scanning (SAST/DAST), dependency checking, and container image signing into CI pipelines.
• Observability & Telemetry:
  Instrument applications with structured logging, distributed tracing, and real-time metric tracking using Google Cloud Operations Suite (Cloud Logging/Monitoring) to ensure operational health and continuous audit readiness.
• Security & Compliance Remediation:
  Partner directly with the Information Security team to…