Software Developer – FedRAMP
This role has been designed as "Onsite" with an expectation that you will primarily work from an HPE office.
Who We Are:
Hewlett Packard Enterprise is the global edge-to-cloud company advancing the way people live and work. We help companies connect, protect, analyze, and act on their data and applications wherever they live, from edge to cloud, so they can turn insights into outcomes at the speed required to thrive in today's complex world.
Job Description:
In the HPE Hybrid Cloud, we lead the innovation agenda and technology roadmap for all of HPE. This includes managing the design, development, and product portfolio of our next-generation cloud platform, Green Lake. Working with customers, we help them reimagine their information technology needs to deliver a simple, consumable solution that helps them drive their business results.
What you'll do:
We're looking for a Software Developer to design, build and secure cloud-native services for the Gateway product, which must meet FedRAMP security requirements. The developer will work with engineering, security and compliance teams to deliver features that are secure, scalable and ready for audits for government customers.
Responsibilities:
•Write, maintain and improve code in Java, Go and/or Python for Gateway and related services.
•Apply Kubernetes security best practices across clusters and workloads.
•Secure the Gateway application: authentication, authorization, TLS/mTLS, rate limiting and input validation.
•Implement FedRAMP security controls (NIST SP 800-53) in code, infrastructure and CI/CD pipelines.
•Build secure deployment pipelines, including image scanning, signing and dependency checks.
•Use FIPS 140-2/140-3 validated encryption for data in transit and at rest.
•Fix vulnerabilities within FedRAMP deadlines and contribute to monthly ConMon/POA&M reporting.
•Provide technical evidence for System Security Plans (SSP), audits and 3PAO assessments.
•Take part in design reviews, code reviews and threat modeling.
What you need to bring:
Education and Experience Required:
•Bachelor's degree in Computer Science, Engineering or a related field, or equivalent experience.
•5-7+ years of software development experience.
Knowledge and Skills:
•Strong programming skills in at least one of Java, Go or Python (knowing more than one is a plus).
•Hands-on experience with CIS Benchmarks for Ubuntu Linux.
•Hands-on experience with Kubernetes, Docker and Helm.
•Knowledge of Kubernetes security best practices, including: RBAC and least-privilege service accounts, Network Policies and namespace isolation, Pod Security Standards (non-root, read-only file systems, dropped capabilities), Secrets management (Vault, sealed secrets, KMS), Image security (trusted registries, scanning, signing), Admission control (OPA Gatekeeper / Kyverno).
•Understanding of API gateway / application security, including: TLS/mTLS and certificate management, OAuth2, OIDC, JWT and SAML authentication, Rate limiting, throttling and protection against common attacks, Secure logging and audit trails.
•Working knowledge of FedRAMP, NIST SP 800-53 or similar compliance frameworks.
•Solid secure coding practices (OWASP Top 10).
•Experience with CI/CD tools (Jenkins, GitHub Actions, GitLab CI).
What We Can Offer You:
Health & Wellbeing — We strive to provide our team members and their loved ones with a comprehensive suite of benefits that supports their physical, financial and emotional wellbeing.
Personal & Professional Development — We also invest in your career because the better you are, the better we all are. We have specific programs catered to helping you reach any career goals you have — whether you want to become a knowledge expert in your field or apply your skills to another division.
Unconditional Inclusion — We are unconditionally inclusive in the way we work and celebrate individual uniqueness. We know varied backgrounds are valued and succeed here. We have the flexibility to manage our work and personal needs.
