Sr Principal DevOps Engineer (Prisma AIRS)

Our Mission

At Palo Alto Networks®, we’re united by a shared mission—to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you’re ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you’re in the right place.

Who We Are

In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values: Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us!

Job Summary

Your Career

With Prisma AIRS, Palo Alto Networks is building the world's most comprehensive AI security platform. Organizations are increasingly building complex ecosystems of AI models, applications, and agents, creating dynamic new attack surfaces with risks that traditional security approaches cannot address. In response, Prisma AIRS delivers model security, posture management, AI red teaming, and runtime protection. Our customers can confidently deploy AI-driven innovation while ensuring a formidable security posture from development through runtime.

We are looking for a Senior Principal DevOps Engineer to join the Prisma AIRS shared services team. In this role you will be a technical leader whose influence extends across the entire Prisma AIRS organization. You won't just operate infrastructure; you'll build the platform that defines how we build and ship software, and you'll set the technical direction that other engineers build on.

Our Stack

Our platform is built on a modern, cloud-native foundation centered around Kubernetes. We value deep expertise in a few core areas and a strong desire to master the technologies that drive our platform forward.

• Cloud and orchestration: GCP (primary), Kubernetes, AWS, containerization tools
• CI/CD and GitOps: GitLab CI, Argo CD, Argo Rollouts, GitHub Actions
• Infrastructure as Code (IaC): Kubernetes Config Connector (KCC), Helm, Terraform, Cue
• Languages and core tooling: Python (modern, typed), Go (highly desired), BASH, rego
• We actively leverage AI coding assistants like Claude to boost our productivity.
  

Your Impact

• Act as a force multiplier for our engineering teams by building and evangelizing a cohesive Internal Developer Platform (IDP) that simplifies, builds safety into, and accelerates the path to production.
• Drive the adoption of GitOps and progressive delivery across the organization. Leveraging the Argo suite, you will provide safe, automated, and observable deployment pipelines that engineering teams can trust, directly improving the quality and velocity of our product.
• Elevate the organization's cloud-native expertise by setting the standard for Kubernetes and GCP best practices. Your guidance and the patterns you create will directly influence the architecture, reliability, and security of our core products.
• Architect and operate a highly available, secure, and scalable cloud infrastructure. Your work will form the resilient foundation that Prisma AIRS is built upon, ensuring our customers are protected around the clock.
• Manage expensive GPU/TPU resource allocation, spot-instance fleets, and cluster usage dashboards.
• Reduce engineering toil and eliminate entire classes of problems through insightful automation, self-service tooling, and observability frameworks. You will give time back to every engineer in the AIRS org.
• Set the technical direction for shared platform services and drive infrastructure architecture decisions across the Prisma AIRS organization.
• Mentor engineers, raise the engineering bar, and champion high standards of automation, reliability, and security across teams.

Qualifications

Required Qualifications

• 10+ years of professional experience in DevOps, Site Reliability Engineering (SRE), or Cloud Platform Engineering, including designing and operating large-scale cloud infrastructure.
• Mastery of Infrastructure as Code and cloud platforms. You have extensive, hands-on experience building and managing cloud infrastructure declaratively. You are an expert in modern IaC tools (Terraform, Helm, Crossplane/ACK/KCC) and have deep proficiency with a major cloud provider, ideally GCP.
• Deep expertise in the cloud-native ecosystem. You have a thorough understanding of Kubernetes in large-scale production environments and are fluent in building automation and platform tooling using modern, typed Python.
• Extensive production experience with GitOps and CI/CD: Argo CD and Argo Rollouts for continuous delivery and progressive rollout, and GitLab CI for automating complex software delivery pipelines.
• Hands on with infrastructure: doesn't just use infrastructure or manage infrastructure via applications, but builds infrastructure. Examples: cloud-native, kubernetes-native, builds internal developer platforms, builds terraform providers.
• A superpower for debugging. When things break, you are the person people turn to. You have a deep command of engineering fundamentals — from Linux internals and networking to application performance — that allows you to systematically diagnose and solve problems in complex distributed systems, regardless of the specific technology stack.
• An innate sense of ownership and a collaborative spirit. You are a highly technical, self-motivated contributor who sees projects through from idea to production. Crucially, you are easy to work with and excel at navigating the organization, acting as a central point of collaboration for multiple engineering teams.
  

Preferred Qualifications

• MLOps experience operating GPU-accelerated inference and model-serving infrastructure at scale (Google Vertex AI, Amazon Bedrock, NVIDIA Triton Inference Server).
• Advanced MLOps: data/feature pipelines, model serving (KServe/Seldon), ML security and governance, and LLMOps (RAG, eval, guardrails).
• Languages and core tooling: Python (modern, typed), Go (highly desired), BASH, rego.
• Cloud-native monitoring and observability (Prometheus, Grafana, GCP Cloud Monitoring).
• Cloud security compliance, IAM controls, and securing container workloads.
• Experience using AI coding assistants (Claude Code, etc.).
• BS/MS in Computer Science, Computer Engineering, or a related technical field, or equivalent practical experience.

#LI-TD1

Compensation Disclosure

The compensation offered for this position will depend on qualifications, experience, and work location. For candidates who receive an offer at the posted level, the starting base salary (for non-sales roles) or base salary + commission target (for sales/com-missioned roles) is expected to be the annual range listed below. The offered compensation may also include restricted stock units and a bonus. A description of our employee benefits may be found here.

Our Commitment

We’re trailblazers that dream big, take risks, and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together.

We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at  accommodations@paloaltonetworks.com.

Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics.

All your information will be kept confidential according to EEO guidelines.