Senior Software Architect

Job Summary CyberArk, a Palo Alto Networks company, is seeking a skilled Production Engineering Architect to join our growing engineering team. In this role, you will serve as a technical leader responsible for designing and implementing scalable, secure cloud infrastructure within a FedRAMP-compliant environment. You will work alongside cross‑functional teams to drive platform visibility, accelerate CI/CD maturity, and shape the future of our cloud architecture. Responsibilities Design and implement AWS infrastructure components such as VPCs, EC2, EKS, S3, tagging schemes, CloudFormation, etc. Architect deployment and management automation of cloud‑based infrastructure and software. Design and implement automated solutions to streamline FedRAMP compliance activities (inventory, vulnerability management, etc.). Architect the use of configuration management tools in both Windows and Linux – AWS CloudFormation, Terraform, Ansible. Design and implement SRE solutions for high availability and resiliency, ensuring architectures meet availability and recoverability requirements. Architect and implement cloud‑based monitoring, alerting and observability. Provide support and guidance to junior engineers to create efficiencies within the team. Maintain a deep understanding of the latest tech solutions, trends, and the ability to dive into architectural details as needed. Develop and maintain architecture documentation, design standards, and infrastructure‑as‑code (IaC) templates to drive consistency across our platforms. Work with team leads to identify areas of improvement, prepare architecture road maps, and advocate to product management. Evaluate and integrate AI‑powered tooling into engineering workflows, including AI‑assisted code review, anomaly detection, intelligent alerting, and automated remediation. Qualifications B.S. in Computer Science or equivalent experience. Minimum 5 years of experience managing AWS infrastructure. Minimum of 8 years of experience with systems engineering and software development. Expert understanding/experience of container orchestration platforms such as Kubernetes, ECS, or equivalent. Solid understanding/experience of web services, databases, and related infrastructure/architectures. Solid understanding of backup/restore best practices. Strong programming expertise in C#, C++, Java, Python or equivalent language. Strong grasp of platform observability, including AI‑assisted monitoring strategies using tools like Datadog or similar. Experience supporting an enterprise‑level SaaS environment. Familiarity with FedRAMP compliance requirements and how they influence architectural decisions around network segmentation, encryption, identity, and access management – including considerations specific to AI data pipelines and model storage. Familiarity with NIST 800‑53 control requirements as they relate to FedRAMP, cloud and AI system design. Candidates must be U.S. citizens to meet federal access and security compliance requirements. Compensation Disclosure The compensation offered for this position will depend on qualifications, experience, and work location. For candidates who receive an offer at the posted level, the starting base salary (for non‑sales roles) or base salary + commission target (for sales/com‑missioned roles) is expected to be the annual range listed below. The offered compensation may also include restricted stock units and a bonus. A description of our employee benefits may be found here. $147,000.00 – $237,500.00/yr Equal Opportunity Employment Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics. All your information will be kept confidential according to EEO guidelines. Is role eligible for Immigration Sponsorship? No. Please note that we will not sponsor applicants for work visas for this position. #J-18808-Ljbffr