Software Developer – FedRAMP

Software Developer – FedRAMP This role has been designed as ‘’Onsite’ with an expectation that you will primarily work from an HPE office. Who We Are: Hewlett Packard Enterprise is the global edge-to-cloud company advancing the way people live and work. We help companies connect, protect, analyze, and act on their data and applications wherever they live, from edge to cloud, so they can turn insights into outcomes at the speed required to thrive in today’s complex world. Our culture thrives on finding new and better ways to accelerate what’s next. We know varied backgrounds are valued and succeed here. We have the flexibility to manage our work and personal needs. We make bold moves, together, and are a force for good. If you are looking to stretch and grow your career our culture will embrace you. Open up opportunities with HPE. Job Description: In the HPE Hybrid Cloud , we lead the innovation agenda and technology roadmap for all of HPE. This includes managing the design, development, and product portfolio of our next-generation cloud platform, Green Lake. Working with customers, we help them reimagine their information technology needs to deliver a simple, consumable solution that helps them drive their business results. Join us redefine what’s next for you.   What you’ll do: We're looking for a Software Developer to design, build and secure cloud-native services for the Gateway product, which must meet FedRAMP security requirements. The developer will work with engineering, security and compliance teams to deliver features that are secure, scalable and ready for audits for government customers. Responsibilities: ·       Write, maintain and improve code in Java, Go and/or Python for Gateway and related services. ·       Apply Kubernetes security best practices across clusters and workloads. ·       Secure the Gateway application: authentication, authorization, TLS/mTLS, rate limiting and input validation. ·       Implement FedRAMP security controls (NIST SP 800-53) in code, infrastructure and CI/CD pipelines. ·       Build secure deployment pipelines, including image scanning, signing and dependency checks. ·       Use FIPS 140-2/140-3 validated encryption for data in transit and at rest. ·       Fix vulnerabilities within FedRAMP deadlines and contribute to monthly ConMon/POA&M reporting. ·       Provide technical evidence for System Security Plans (SSP), audits and 3PAO assessments. ·       Take part in design reviews, code reviews and threat modeling.   What you need to bring: Education and Experience Required: ·       Bachelor's degree in Computer Science, Engineering or a related field, or equivalent experience. ·       5-7+ years of software development experience. Knowledge and Skills: • Strong programming skills in at least one of Java, Go or Python (knowing more than one is a plus). • Hands-on experience with CIS Benchmarks for Ubuntu Linux. • Hands-on experience with Kubernetes, Docker and Helm . • Knowledge of Kubernetes security best practices , including:RBAC and least-privilege service accountsNetwork Policies and namespace isolationPod Security Standards (non-root, read-only file systems, dropped capabilities)Secrets management (Vault, sealed secrets, KMS)Image security (trusted registries, scanning, signing)Admission control (OPA Gatekeeper / Kyverno) • Understanding of API gateway / application security , including:TLS/mTLS and certificate managementOAuth2, OIDC, JWT and SAML authenticationRate limiting, throttling and protection against common attacksSecure logging and audit trails • Working knowledge of FedRAMP, NIST SP 800-53 or similar compliance frameworks. • Solid secure coding practices (OWASP Top 10). • Experience with CI/CD tools (Jenkins, GitHub Actions, GitLab CI). Accessibility HPE