Description
We’re Workday, a leading AI platform for managing people, money, and agents. We're seeking a Senior Cybersecurity Engineer to join our Network Security team.
As a Senior Cybersecurity Engineer, you’ll play a key role in designing, building, and operating the security controls that protect Workday’s customer data environments and our own Workmates across AWS, GCP, private cloud, and enterprise infrastructure.
You’ll be both a hands-on builder and a technical leader: architecting scalable network security solutions, automating security control deployment and enforcement, mentoring team members, and partnering across the organization to ensure security is embedded into the way we design and operate systems.
Responsibilities:
- Architect and build next-generation network security controls, patterns, and templates across AWS, GCP, private cloud, and enterprise environments.
- Automate the security of the enterprise by building scalable systems for effective continuous monitoring and enforcement of expected security posture using tools such as Terraform, GoLang, and Python.
- Mentor team members and guide them in their development.
- Evaluate production infrastructure designs to determine security requirements and conduct rigorous network security assessments.
- Partner with Cybersecurity and Trust teams to develop policies, standards, and guidelines aligned with industry best practices (CIS, NIST, FedRAMP) and implement control enforcement against those standards.
- Provide operational support for critical security infrastructure, including DDoS detection, WAF, and firewall controls (appliances and cloud-native) in a production environment.
Requirements:
- Minimum of 7 years of experience in network security architecture, engineering, and design.
- Hands-on experience deploying network security controls across AWS and/or GCP.
- Experience with cloud-native security technologies such as AWS Network Firewall, AWS WAF, GCP Cloud Armor, or controls.
- Experience with at least one scripting or programming language, such as Python or Go.
- Experience with infrastructure automation tools such as Terraform, Ansible, Consul, or similar technologies.
- Experience designing, implementing, or managing zero trust architectures or SASE solutions, including identity-aware access, software-defined perimeters, and secure remote access frameworks.
Nice to Have:
- Proven experience delivering network security initiatives in production, customer-facing environments.
- Deep understanding of public cloud networking and security across AWS and GCP, with the ability to design secure architectures for multi-cloud and hybrid environments.
- Experience evaluating, implementing, and operating security platforms, including firewalls, web application firewalls, DDoS protection, and cloud-native network security controls.
- Strong understanding of application, system, and network security threats, attack techniques, and mitigating controls.
- Experience implementing security policies and supporting compliance with data protection and security standards.
- Ability to leverage AI and agentic capabilities to streamline engineering workflows, improve consistency, and deliver security solutions at scale.
Benefits:
- Annualized base salary ranging from $152,000 to $228,000 USD.
- Opportunity to earn bonus and stock grants.
- Comprehensive benefits package.
- Flexible work arrangements, including remote work options.