Software Developer – FedRAMP

Overview

Design, build and secure cloud-native services for the Gateway product so they meet FedRAMP security requirements, working with engineering, security and compliance teams on features that are secure, scalable and audit-ready for government customers.

What you'll do

• Write, maintain and improve code in Java, Go and/or Python for Gateway and related services.
• Apply Kubernetes security best practices across clusters and workloads.
• Secure the Gateway application: authentication, authorization, TLS/mTLS, rate limiting and input validation.
• Implement FedRAMP security controls (NIST SP 800-53) in code, infrastructure and CI/CD pipelines.
• Build secure deployment pipelines, including image scanning, signing and dependency checks.
• Use FIPS 140-2/140-3 validated encryption for data in transit and at rest.
• Fix vulnerabilities within FedRAMP deadlines and contribute to monthly ConMon/POA&M reporting.
• Provide technical evidence for System Security Plans (SSP), audits and 3PAO assessments.
• Take part in design reviews, code reviews and threat modeling.

What you'll need

• Bachelor's degree in Computer Science, Engineering or a related field, or equivalent experience.
• 5-7+ years of software development experience.
• Strong programming skills in at least one of Java, Go or Python.
• Hands-on experience with CIS Benchmarks for Ubuntu Linux.
• Hands-on experience with Kubernetes, Docker and Helm.
• Knowledge of Kubernetes security best practices, including RBAC and least-privilege service accounts, Network Policies and namespace isolation, Pod Security Standards (non-root, read-only file systems, dropped capabilities), secrets management (Vault, sealed secrets, KMS), image security (trusted registries, scanning, signing), and admission control (OPA Gatekeeper / Kyverno).
• Understanding of API gateway / application security, including TLS/mTLS and certificate management, OAuth2, OIDC, JWT and SAML authentication, rate limiting, throttling and protection against common attacks, and secure logging and audit trails.
• Working knowledge of FedRAMP, NIST SP 800-53 or similar compliance frameworks.
• Solid secure coding practices (OWASP Top 10).
• Experience with CI/CD tools (Jenkins, GitHub Actions, GitLab CI).

Nice to have

• Knowing more than one of Java, Go or Python.

Details

• Onsite role, with an expectation of working primarily from an HPE office.
• Location: Hyderabad, Telangana, India.