Apply on Employer Site

Workday · 3 weeks ago

Senior Cybersecurity Engineer - Network Security and Network Fundamentals

McLean, VA

Full-time

Hybrid

Senior Level

$156K/yr - $234K/yr

7+ years exp

Workday is a Fortune 500 company and a leading AI platform for managing people, money, and agents. The Senior Cybersecurity Engineer will be responsible for designing and implementing systems and security controls in production environments, developing automation for deployment and validation tasks, and collaborating with internal customers to drive projects forward.

Artificial Intelligence (AI)Cloud ComputingEnterprise SoftwareHuman ResourcesSaaSSoftware

Comp. & Benefits

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Designing and implementing systems and security controls in production environments

Developing automation for deployment and validation tasks

Partnering with internal customers to drive projects forward

Researching new technologies and opportunities for improving how we operate

Qualification

Network designNetwork securityCloud securityDDoS detectionTerraformPythonKubernetesAWSGCPVulnerability managementSoft skills

Required

7+ years of direct, technical experience related to network design in LAN/WAN, SDN, and cloud connected infrastructure along with network security, platform, or infrastructure security

2+ years crafting, deploying, and operating web application firewall controls (WAF)

Operational experience supporting DDoS detection, WAF, and IPS in a production environment

Expertise with Terraform, Go Lang or Python, Kubernetes operators and familiarity with using these and/or other tools to deliver consistent, scalable security solutions

This role may require a security clearance at the TS/SCI w/CI Poly level. Applicants must have the ability to obtain and maintain a U.S. government issued security clearance. An active TS/SCI w/CI Poly is preferred

Preferred

Experience deploying infrastructure components, and application and network security systems in AWS and GCP

Extensive experience designing, implementing, and managing enterprise-scale networks (LAN/WAN, SDN, and cloud-connected infrastructures)

Deep knowledge of network security principles including firewalls, IDS/IPS, VPNs, NAC, and zero-trust architectures

Proficient with routing and switching protocols (BGP, OSPF, EIGRP), VLANs, load balancing, and high-availability design

Skilled in network hardening and threat mitigation, including vulnerability management, segmentation, and policy enforcement

Hands-on experience with security frameworks and compliance (NIST 800-53, ISO 27001, FedRAMP, DoD IL4/IL5,)

Hands-on experience of the DoD's Boundary Cloud Access Point (BCAP) and onboarding SaaS and/or CSP technologies to the BCAP through authorized networking architectures and implementations

Proven understanding of public cloud network security concepts and hands-on experience documenting and implementing security controls of the same

Understanding of application, system, and security threats, attack techniques and mitigating controls in public cloud and containerized environments

Demonstrated experience designing, implementing, and maintaining network security

Adept at implementing security policies, conducting vulnerability assessments and penetration testing, and ensuring regulatory compliance with data protection laws

Proficient in using programming languages to design, write, test, and debug code, including understanding syntax, semantics, and programming paradigms

Specialized expertise in the design and implementation of systems, procedures, and protocols to protect information and data from unauthorized access, damage, or theft

Experienced in identifying, analyzing, and mitigating threats to information assets, utilizing knowledge of security technologies, incident response protocols, threat intelligence, and risk management strategies

Skilled in configuring security software and hardware, implementing intrusion detection systems, managing secure access controls, setting up firewalls, and conducting security audits to protect organizational assets