Senior Cybersecurity Engineer

Workday; Ireland; On-site; EUR 80,000 - 100,000; Full time

Job summary

Workday in Ireland is seeking a Senior Cybersecurity Engineer to take charge of designing and implementing innovative network security controls for customer data environments across AWS and GCP. This role involves building scalable security solutions, mentoring team members, and ensuring compliance with industry standards.

If you have over 7 years of experience in network security architecture and are proficient in scripting languages like Python and Go, this might be the perfect opportunity for you. Join a dynamic team that embraces collaboration and excellence in cybersecurity.

Qualifications

• 7+ years of experience in network security architecture and design.
• Hands-on experience with AWS and GCP deployment.
• Strong foundation in information security and network security threats.

Responsibilities

• Design and implement network security controls across AWS, GCP, and private cloud.
• Mentor team members and consult on security requirements.
• Provide operational support for DDoS detection and firewall controls.

Skills

Python

Go

Terraform

Ansible

Network security architecture

AI capabilities

Tools

AWS Network Firewall

GCP Cloud Armor

DDoS detection tools

Web Application Firewalls

Job description

Responsibilities

• The Network Security team delivers innovative solutions to sophisticated challenges, serving as a critical component of the Workday Security organization’s mission to ensure the security and safety of Workday customers, users, and their data.
• We design, build, and operate critical security controls for customer data environments, overcoming constantly shifting — and exciting — technical challenges to ensure trust in the Workday service.
• Our team is responsible for operating the systems and controls that we build, advising other Workday business units on ways to securely implement services and infrastructure, and partnering with our information security team to ensure policy compliance and address gaps.
• We operate data centers and cloud environments across the globe and are constantly improving our network security posture and capabilities.
• Over the next year, we are focused on delivering scalable network security controls such as web application firewalls for customer data environments, improving platform resilience and the consistency of security controls across the enterprise, and leveraging AI and agents to accelerate how we deliver effective solutions for all of Workday’s customers.
• Our team is spread across the US and EU, and though we connect mostly virtually, we love sharing in each other’s successes, celebrating wins, and embracing fun with informal team meetings and activities.
• We genuinely enjoy getting to know each other beyond our technical skills — because great work is even better when you’re part of a great team.
• As a Senior Cybersecurity Engineer on the Network Security team, you will play a pivotal role in designing and delivering the security controls that protect Workday’s customer data environments across AWS, GCP, and private cloud environments.
• You are both a builder and a leader — architecting scalable security solutions while mentoring team members and consulting with partners across the organization to ensure security is embedded into everything we do.
• Architect and Build: Design and implement next‑generation network security controls, patterns, and templates across AWS, GCP, and private cloud environments.
• Automate: Enhance the security of the enterprise by building scalable systems for effective continuous monitoring and enforcement of expected security posture using tools such as Terraform, GoLang, and Python.
• Mentor: Serve as a technical lead by driving initiatives forward and guiding team members in their development.
• Consult: Evaluate production infrastructure designs to determine security requirements and conduct rigorous network security assessments.
• Collaborate: Partner with Cybersecurity and Trust teams to develop policies, standards, and guidelines aligned with industry best practices (CIS, NIST, FedRAMP) and implement control enforcement against those standards.
• Operational Excellence: Provide operational support for critical security infrastructure, including DDoS detection, WAF, and firewall controls (appliances and cloud‑native) in a production environment.

Qualifications

• Proficient in at least one scripting language (Python, Go) and automation tooling (Terraform, Ansible, or Consul).
• 7+ years of progressively responsible experience in network security architecture and design.
• Hands‑on experience deploying network security controls across AWS and/or GCP, including cloud‑native security controls (e.g., AWS Network Firewall, WAF, GCP Cloud Armor).
• Ability to align security programs with industry standards such as CIS, NIST, and FedRAMP.
• Strong foundation in information security, including understanding of application, system, and network security threats, attack techniques, and mitigating controls, with the ability to implement effective security policies and ensure compliance with data protection regulations.
• Proven ability to leverage AI and agentic capabilities to streamline processes and deliver engineering and security solutions at scale. Experience using these evolving toolsets to ensure consistency of control implementation across disparate systems is a strong differentiator.
• Experience with host‑based network security systems (e.g., Illumio, Calico) and large‑scale data center networking.
• Demonstrated commitment to security by design, with the ability to integrate security measures into the architecture of systems from the outset, including risk assessment methodologies and the design of systems that can resist, tolerate, and recover from security events.
• Skilled in security engineering, with experience designing and implementing secure network architectures, managing encryption, authentication, intrusion detection, and firewall technologies, and developing incident response plans to address security breaches.
• Extensive experience with security platforms, including industry‑leading firewalls and web application firewall (WAF) controls, with the ability to evaluate, implement, and operate these platforms to protect customer data environments effectively.
• Organized, thorough problem solver with the ability to build consensus among multiple partners and document complex security architectures clearly.
• Excellent written and verbal communication skills, with the ability to build and leverage positive relationships across the organization.
• Experience supporting DDoS detection, IPS/IDS tooling, and participating in an on‑call rotation for production networks.
• Deep understanding of public cloud environments (AWS, GCP) with the ability to design, deploy, and manage secure network architectures across multi‑cloud and hybrid infrastructure, ensuring consistent security posture at scale.