CURRENTLY ATPALO ALTO NETWORKS

Ofek Atar

Senior Staff Software EngineerBackend · Platform · Security

I work on the systems other systems depend on — secrets infrastructure, critical-path services, and the automation that keeps them reliable. Five years across Palo Alto Networks and Snyk, mostly on the parts where being wrong is expensive.

01

Selected work

Agentic systems

  • Agents that close vulnerabilities without a human

    Palo Alto Networks

    I architected and built an LLM-agent system in Python that carries an open-source vulnerability from detection to a review-ready pull request with nobody in the loop, resolving safe upgrade targets across Bundler, Gradle, and Maven projects. I wrote the solution design and shipped it as shared internal tooling, which retired manual triage for every service team.

    • Python
    • LLM agents
    • MCP
    • Dependency resolution

Platform & reliability

  • Moving the platform's most critical service to a hardened cloud

    Snyk

    I led the migration of Snyk's core monolithic service — the largest component in the platform's main user flows, and its most consequential single point of failure — into a new, security-hardened cloud environment. It carried the highest change risk in the program and gated several other teams, so the job was as much sequencing cross-team dependencies and keeping blockers visible as it was infrastructure work.

    • Kubernetes
    • Helm
    • PostgreSQL
    • Cross-team delivery

  • An SLO practice for every customer-facing service

    Snyk

    I ran the first milestone of Snyk's reliability program as its program manager: HTTP SLOs implemented across every customer-facing service, delivered on schedule. That meant cross-team coordination, progress dashboards, office hours, status reviews with division directors, and helping define the recurring service-review format the organization kept afterwards.

    • SLOs
    • Observability
    • Program management

  • Integration testing that survives contact with reality

    Palo Alto Networks

    I defined the group's integration testing architecture and drove its phased rollout, grounding the strategy in an audit of assertion quality, test isolation, and tenant lifecycle rather than in coverage numbers. I built the Go service simulator that unblocked it, removing a live third-party dependency from every PR and merge pipeline.

    • Go
    • Test architecture
    • CI

APIs & product

  • Snyk IaC, from concept to production

    Snyk

    I took Snyk IaC from concept to production in Go and TypeScript — the static analysis engine that secures Infrastructure-as-Code templates, plus its delivery across IDE integrations, the CLI, GitOps, public APIs, and the web platform. I later led the SCM integration for its successor and the staged customer transition between product versions, keeping data intact in both directions.

    • Go
    • TypeScript
    • Static analysis
    • SCM integrations

  • A secrets API built for multi-tenant enterprises

    Palo Alto Networks

    I own the V2 Safes and Secrets REST API for CyberArk's Conjur Cloud, from architecture through production — the full resource and permissions surface in Ruby on Rails over PostgreSQL. Multi-schema isolation keeps tenants genuinely separated, and the backward-compatibility layer is what let enterprise customers migrate off the legacy surface.

    • Ruby on Rails
    • PostgreSQL
    • REST
    • Multi-tenancy
02

Where I've been

  1. Senior Staff Software Engineer

    May 2026 — Present

    Palo Alto Networks · Israel

    Secrets infrastructure on CyberArk's Conjur Cloud, and the agentic tooling that maintains it.

  2. Senior Full Stack Developer

    Aug 2021 — May 2026

    Snyk · Tel Aviv, Israel

    Five years split between product and platform. Delivered Snyk IaC end to end, then moved to infrastructure and reliability: the core monolith's cloud migration and performance overhaul, its Helm and CI restructuring, an organization-wide SLO program, and proactive database work — including an index-overflow audit that caught two tables heading for downtime and data loss.

  3. Full Stack Developer

    Feb 2021 — Aug 2021

    PDQ — PrettyDamnQuick · Herzliya, Israel

    Built the product platform from scratch at an early-stage startup, owning design through deployment across Node.js, Angular, MySQL, Redis, Docker, Kubernetes, and AWS.

  4. Full Stack Developer

    Jun 2020 — Dec 2020

    Spinomenal · Ramat Gan, Israel

    Built a cross-platform Phaser game engine and secure transactional payment services.

  5. B.Sc. Computer Science

    Oct 2017 — Jun 2020

    Bar-Ilan University · Ramat Gan, Israel

03

What I work with

  • Languages

    PythonTypeScriptJavaSQLGoRuby

  • AI & Automation

    LLM agentsPrompt engineeringAutonomous pipelinesMCP

  • Backend & APIs

    Node.jsREST & OpenAPISpringRuby on RailsGraphQLFastAPIgRPC

  • Data & Messaging

    PostgreSQLRedisKafkaElasticsearch

  • Cloud & DevOps

    AWSDockerKubernetesGCPTerraformGitHub ActionsHelmArgoCDDatadog

  • Front-end

    ReactNext.jsVueAngular

The list is less interesting than the pattern: most of these I picked up because a problem needed them, not the other way round.

04

Get in touch

Open to conversations about backend architecture, secrets infrastructure, and agentic systems.

Download résumé

Built with Next.js, Motion, and GSAP. © 2026 Ofek Atar.