Software Developer – FedRAMP

In the HPE Hybrid Cloud, we lead the innovation agenda and technology roadmap for all of HPE. This includes managing the design, development, and product portfolio of our next-generation cloud platform, Green Lake. Working with customers, we help them reimagine their information technology needs to deliver a simple, consumable solution that helps them drive their business results. Join us redefine what’s next for you.

We're looking for a Software Developer to design, build and secure cloud-native services for the Gateway product, which must meet FedRAMP security requirements. The developer will work with engineering, security and compliance teams to deliver features that are secure, scalable and ready for audits for government customers.

Responsibilities:

·       Write, maintain and improve code in Java, Go and/or Python for Gateway and related services.

·       Apply Kubernetes security best practices across clusters and workloads.

·       Secure the Gateway application: authentication, authorization, TLS/mTLS, rate limiting and input validation.

·       Implement FedRAMP security controls (NIST SP 800-53) in code, infrastructure and CI/CD pipelines.

·       Build secure deployment pipelines, including image scanning, signing and dependency checks.

·       Use FIPS 140-2/140-3 validated encryption for data in transit and at rest.

·       Fix vulnerabilities within FedRAMP deadlines and contribute to monthly ConMon/POA&M reporting.

·       Provide technical evidence for System Security Plans (SSP), audits and 3PAO assessments.

·       Take part in design reviews, code reviews and threat modeling.

What you need to bring:

Education and Experience Required:

·       Bachelor's degree in Computer Science, Engineering or a related field, or equivalent experience.

·       5-7+ years of software development experience.

• Strong programming skills in at least one of Java, Go or Python (knowing more than one is a plus).
• Hands-on experience with CIS Benchmarks for Ubuntu Linux.
• Hands-on experience with Kubernetes, Docker and Helm.
• Knowledge of Kubernetes security best practices, including:RBAC and least-privilege service accountsNetwork Policies and namespace isolationPod Security Standards (non-root, read-only file systems, dropped capabilities)Secrets management (Vault, sealed secrets, KMS)Image security (trusted registries, scanning, signing)Admission control (OPA Gatekeeper / Kyverno)
• Understanding of API gateway / application security, including:TLS/mTLS and certificate managementOAuth2, OIDC, JWT and SAML authenticationRate limiting, throttling and protection against common attacksSecure logging and audit trails
• Working knowledge of FedRAMP, NIST SP 800-53 or similar compliance frameworks.
• Solid secure coding practices (OWASP Top 10).
• Experience with CI/CD tools (Jenkins, GitHub Actions, GitLab CI).

HPE is committed to creating an inclusive and accessible workplace and encourages applications from all qualified individuals, including those with disabilities. If you believe you require accommodation during any stage of the application or interview process, please submit your request by completing our secure form linked here.

Note: This option is reserved for applicants needing assistance/reasonable accommodation related to a disability.

We strive to provide our team members and their loved ones with a comprehensive suite of benefits that supports their physical, financial and emotional wellbeing.

We also invest in your career because the better you are, the better we all are. We have specific programs catered to helping you reach any career goals you have — whether you want to become a knowledge expert in your field or apply your skills to another division.

We are unconditionally inclusive in the way we work and celebrate individual uniqueness. We know varied backgrounds are valued and succeed here. We have the flexibility to manage our work and personal needs. We make bold moves, together, and are a force for good.

HPE will comply with all applicable laws related to employer use of arrest and conviction records, including laws requiring employers to consider for employment qualified applicants with criminal histories.

We have become aware of an increase in fraudulent recruitment activities in which individuals impersonate our company or authorized recruitment agencies to offer fake employment opportunities. These scams may occur through false websites, emails, social media, or chat-based applications and often aim to obtain personal information or money. Please note that Hewlett Packard Enterprise (HPE), its direct and indirect subsidiaries and affiliated companies, and its authorized recruitment agencies/vendors will never charge a candidate a registration fee, hiring fee, or any other fee in connection with its recruitment and hiring process. We also never request personal information such as back account details, Social Security numbers, or national IDs via social media or chat applications.

All legitimate job opportunities will come through official company channels, and candidates are responsible for verifying the credentials of any third party claiming to represent the company. Any reliance on fraudulent communication is at the individual’s own risk, and HPE disclaims legal liability for any resulting damages. If you suspect recruitment fraud, do not share personal information or make any payments and report the incident to your local authorities immediately.