Senior Cloud Native Security Architect

Qualifications

• The Tech
• We work with an extremely broad range of tools and technologies, mostly cloud centric, and often open source (i.e. CNCF projects). As such, we often take on work in domains where we’re not yet experts, and instead must learn what’s needed in the moment, relying on a set of foundational best practices to guide us.
• That said, there are a few technologies that come up time and time again for which hands-on experience and a good understanding proves extremely valuable.
• These are in approximate order of importance:
• Kubernetes - self-managed (Openshift, K3s, etc.) and cloud managed (GKE, Autopilot, EKS, etc.)
• Container runtimes (Docker / containerd / podman)
• SPIFFE / SPIRE (for workload identity)
• Linux / Unix operating systems (RHEL / Rocky Linux / Ubuntu / Debian)
• Cloud networking (VPCs, firewalls,network peering, VPNs)
• Cloud IAM (predominantly GCP and AWS)
• Cloud databases (Cloud SQL, Spanner, DynamoDB, Bigtable, etc.)
• Golang / Python (for gluing services and deployment scripting)
• Terraform / Crossplane / Config Connector (GCP) / CloudFormation (AWS) (for deploying and managing cloud infrastructure)
• Git (for source control)
• Github Actions / Jenkins (for CI)
• Argo CD / Flux (for CD)
• Vault / Conjur (for secrets management)
• We don’t expect candidates to be experts in all of these, but a strong foundation of security best practices, and a working knowledge of Kubernetes and the major cloud platforms (GCP, AWS, etc.) will be essential. Experience with any of the others is a huge advantage.
• Once again, we encourage you to apply if this work sounds at all interesting to you. We have the ability to offer positions at lower levels if we think the fit is good but your experience needs development. We have capacity in the team to mentor and would always prefer an enthusiastic candidate and a great team fit than lots of experience but a poor fit.
• Thanks for taking the time to read through this spec and we look forward to hearing from you!
• Our Commitment
• We’re trailblazers that dream big, take risks, and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together.
• We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at [email protected].
• Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics.
• All your information will be kept confidential according to EEO guidelines.