Java Developer Security Automation AI Policy as Code Palo Alto

Strong Java Developer with AI skills work if OPA and Rego missing
Engineer II - Security Automation Developer (Java / Policy-as-Code / Palo Alto)

Experience: 5+ years |Location: Bangalore, India

 Role Summary

Were looking for a hands-on developer to build applications that automate Palo Alto firewall policy management and rule deployment. You’ll write Java backend services and Open Policy Agent (OPA) policies in Rego that validate, approve, and deploy firewall changes through a controlled, auditable pipeline. This is a build role, not a firewall administration role.Responsibilities

• Develop Java backend services and REST APIs that automate firewall rule requests, validation, deployment, and rollback
• Write, test, and version OPA/Rego policies that enforce security and compliance standards on proposed rule changes
• Integrate with Palo Alto Networks platforms (Panorama and PAN-OS APIs) [VERIFY: Panorama-managed vs. standalone, PAN-OS version]
• Design data models and queries in MongoDB and PostgreSQL for policy, request, and audit data
• Manage code in GitHub (branching, pull requests, reviews) and CI/CD pipelines
• Write unit, integration, and policy tests, and contribute to technical documentation
• Work in Agile ceremonies and track work in Jira
• Partner with network security, risk, and change management teams to turn requirements into automation

Required Qualifications

• 5+ years of professional Java backend development (Spring Boot, REST APIs, microservices)
• Hands-on experience writing and testing OPA/Rego policies
• Working experience with MongoDB and PostgreSQL
• Experience with Palo Alto firewalls: security policy, address/service objects, zones, and Panorama concepts
• Git/GitHub workflows, including pull requests and code review
• Agile delivery experience and Jira
• Ability to join within 30 days

Preferred Qualifications

• Experience calling PAN-OS or Panorama APIs, or using tools such as the PAN-OS Terraform provider, Ansible PAN-OS collection, or pan-os-python
• PCNSE or equivalent Palo Alto certification
• CI/CD (GitHub Actions, Jenkins), Terraform, Ansible
• Containers, Kubernetes, and OPA bundle distribution
• Experience in regulated environments (financial services, change control, audit)