Java Developer Security Automation AI Policy as Code Palo Alto
Summary
A build role (not firewall admin): develop Java/Spring Boot backend services and REST APIs plus OPA/Rego policies that validate, approve, deploy, and roll back Palo Alto firewall (Panorama/PAN-OS) rule changes through a controlled, auditable pipeline, with data in MongoDB/PostgreSQL and delivery via GitHub CI/CD.
Strong Java Developer with AI skills work if OPA and Rego missing
Engineer II - Security Automation Developer (Java / Policy-as-Code / Palo Alto)
Experience: 5+ years |Location: Bangalore, India
Role Summary
Were looking for a hands-on developer to build applications that automate Palo Alto firewall policy management and rule deployment. You’ll write Java backend services and Open Policy Agent (OPA) policies in Rego that validate, approve, and deploy firewall changes through a controlled, auditable pipeline. This is a build role, not a firewall administration role.Responsibilities
- Develop Java backend services and REST APIs that automate firewall rule requests, validation, deployment, and rollback
- Write, test, and version OPA/Rego policies that enforce security and compliance standards on proposed rule changes
- Integrate with Palo Alto Networks platforms (Panorama and PAN-OS APIs) [VERIFY: Panorama-managed vs. standalone, PAN-OS version]
- Design data models and queries in MongoDB and PostgreSQL for policy, request, and audit data
- Manage code in GitHub (branching, pull requests, reviews) and CI/CD pipelines
- Write unit, integration, and policy tests, and contribute to technical documentation
- Work in Agile ceremonies and track work in Jira
- Partner with network security, risk, and change management teams to turn requirements into automation
Required Qualifications
- 5+ years of professional Java backend development (Spring Boot, REST APIs, microservices)
- Hands-on experience writing and testing OPA/Rego policies
- Working experience with MongoDB and PostgreSQL
- Experience with Palo Alto firewalls: security policy, address/service objects, zones, and Panorama concepts
- Git/GitHub workflows, including pull requests and code review
- Agile delivery experience and Jira
- Ability to join within 30 days
Preferred Qualifications
- Experience calling PAN-OS or Panorama APIs, or using tools such as the PAN-OS Terraform provider, Ansible PAN-OS collection, or pan-os-python
- PCNSE or equivalent Palo Alto certification
- CI/CD (GitHub Actions, Jenkins), Terraform, Ansible
- Containers, Kubernetes, and OPA bundle distribution
- Experience in regulated environments (financial services, change control, audit)
