Sr. Staff Software Engineer (Fedramp)

Palo Alto Networks•Office - USA - CA - Headquarters, CA

2d•$153,700 - $248,600•Onsite

About The Position

As an Sr. Staff Software Engineer (FedRAMP), you will be a critical part of our Engineering team, serving as the technical backbone for our web applications and platform services across strictly governed public sector boundaries. You will be responsible for designing, building, and maintaining secure, scalable full-stack applications—from intuitive, modern frontend interfaces to resilient backend APIs and microservices—while strengthening our security posture across FedRAMP environments. Working closely with Information Security, R&D, DevOps, and internal Support teams, you will combine hands-on full-stack development with rigorous compliance standards to ensure high availability, auditability, and performance across our platform.

Requirements

8+ years of professional experience building full-stack enterprise web applications in complex, highly regulated cloud environments.
Backend Engineering: Proficiency in server-side languages such as Python, Java, or Node.js for architecting resilient RESTful APIs, asynchronous event processing, and microservices.
Frontend Engineering: Demonstrated hands-on experience building modern, responsive, and accessible web user interfaces using frameworks like React, Vue.js, or Angular, with solid state-management fundamentals.
Cloud Ecosystem (GCP): Solid experience deploying, debugging, and running cloud-native applications on Google Cloud Platform (GCP) and containerized orchestration platforms like Google Kubernetes Engine (GKE).
Data Architecture: Practical experience designing, querying, and tuning relational and non-relational databases (e.g., PostgreSQL, MySQL, BigQuery).
AI-Assisted Engineering: Practical experience leveraging AI-assisted developer productivity tools (e.g., GitHub Copilot, Gemini Code Assist, Cursor) or LLM-driven workflows to accelerate prototyping, test generation, and code review within enterprise compliance and security boundaries.
CI/CD & Supply Chain Security: Experience authoring and securing automated pipelines using GitLab CI or GitHub Actions, Docker container builds, and basic Infrastructure as Code (Terraform).
Security & Compliance Foundations: Working familiarity with software security practices required to meet FedRAMP baselines.
Clearance & Eligibility: U.S. Citizenship with the ability to successfully pass background investigations required for DoD IL5 and federal boundary access.

Nice To Haves

GCP Certifications: Google Cloud Certified Professional Cloud Developer or Professional Cloud Security Engineer.
ITSM & Operational Workflows: Experience investigating application escalations and documenting changes using ServiceNow or similar ITSM platforms.
Identity & Zero-Trust: Experience integrating enterprise authentication/authorization protocols (OAuth2, OIDC, SAML, mTLS) and GCP Identity-Aware Proxy (IAP).

Responsibilities

Full-Stack Application Development: Design, develop, test, and maintain secure, responsive frontend interfaces and high-performance backend microservices across governed cloud boundaries.
Secure Coding & Enclave Governance: Author clean, maintainable code adhering to OWASP, NIST SP 800-53, and Secure Software Development Framework (SSDF) standards to enforce zero-trust architecture across FedRAMP enclaves.
API & Cloud-Native Architecture: Architect, build, and optimize RESTful and gRPC APIs and containerized microservices hosted on Google Cloud Platform (GCP) and Google Kubernetes Engine (GKE).
Data & State Management: Design, query, and optimize relational and non-relational database schemas and caching layers utilizing GCP database services (e.g., Cloud SQL, Cloud Spanner, BigQuery) with strict data isolation and auditing.
AI-Augmented SDLC & Velocity: Strategically leverage modern AI developer tools and LLM-assisted workflows (e.g., code synthesis, test scaffolding, automated refactoring, and documentation generation) to accelerate delivery cycles and engineering productivity, while ensuring strict adherence to boundary data security and code governance policies.
CI/CD Pipeline Security Integration: Collaborate with DevOps teams to secure the software supply chain, integrating automated static and dynamic security scanning (SAST/DAST), dependency checking, and container image signing into CI pipelines.
Observability & Telemetry: Instrument applications with structured logging, distributed tracing, and real-time metric tracking using Google Cloud Operations Suite (Cloud Logging/Monitoring) to ensure operational health and continuous audit readiness.
Security & Compliance Remediation: Partner directly with the Information Security team to remediate vulnerability scan findings, implement security controls within the application tier, and execute rapid Plan of Action and Milestones (POA&M) resolutions.
Internal Support & Escalation Triage: Resolve complex, escalated application-tier production issues routed from internal operations and customer support engineering teams via our Service Management platform, conducting root-cause analysis within secure boundaries.
Continuous Improvement & Mentorship: Drive engineering best practices, conduct rigorous code reviews, champion automated testing (unit, integration, and end-to-end), and mentor teammates on modern full-stack development.
On-Call Operations & Incident Response: Participate in an on-call rotation to support critical FedRAMP services, responding to high-priority operational incidents, system alerts, and security escalations to maintain SLA availability across regulated environments.