Senior Cybersecurity Engineer - Network Security

Workday, Inc.; Atlanta (GA); Hybrid; USD 152,000 - 228,000; Full time

Job summary

Workday, Inc. is seeking a Senior Cybersecurity Engineer on the Network Security team to design, build, and operate the security controls that protect customer data across AWS, GCP, private cloud, and enterprise infrastructure.

You will architect scalable network security solutions, automate monitoring and enforcement of security posture using Terraform, Python, and Go, and mentor team members while partnering with security and trust teams to enforce CIS, NIST, and FedRAMP standards.

Qualifications

• 7+ years in network security architecture, engineering, and design.

Responsibilities

• Design and implement next-generation network security controls across cloud and on‑prem environments.

Skills

Network security architecture

AWS / GCP security

Terraform

Python/Go

WAF / Firewall management

Zero trust / SASE

Tools

AWS Network Firewall

AWS WAF

GCP Cloud Armor

Terraform

Ansible

Consul

Job description

Your work days are brighter here. We’re obsessed with making hard work pay off, for our people, our customers, and the world around us. As a Fortune 500 company and a leading AI platform for managing people, money, and agents, we’re shaping the future of work so teams can reach their potential and focus on what matters most. The minute you join, you’ll feel it. Not just in the products we build, but in how we show up for each other. Our culture is rooted in integrity, empathy, and shared enthusiasm. We’re in this together, tackling big challenges with bold ideas and genuine care. We look for curious minds and courageous collaborators who bring sun‑drenched optimism and drive. Whether you’re building smarter solutions, supporting customers, or creating a space where everyone belongs, you’ll do meaningful work with Workmates who’ve got your back. In return, we’ll give you the trust to take risks, the tools to grow, the skills to develop and the support of a company invested in you for the long haul. So, if you want to inspire a brighter work day for everyone, including yourself, you’ve found a match in Workday, and we hope to be a match for you too.

About the Team

The Network Security team delivers innovative solutions to sophisticated challenges, serving as a critical component of the Workday Security organization’s mission to ensure the security and safety of Workday customers, users, and their data. We design, build, and operate critical security controls for customer data environments, overcoming constantly shifting - and exciting - technical challenges to ensure trust in the Workday service. Our team is responsible for operating the systems and controls that we build, advising other Workday business units on ways to securely implement services and infrastructure, and partnering with our information security team to ensure policy compliance and address gaps. We operate data centers and cloud environments across the globe and are constantly improving our network security posture and capabilities. Over the next year, we are focused on delivering scalable network security controls across the Workday enterprise, improving platform resilience and the consistency of security controls in all areas of the business, and leveraging AI and agents to accelerate how we deliver effective solutions for all of Workday’s customers. Our team is spread across the US and EU, and though we connect mostly virtually, we love sharing in each other’s successes, celebrating wins, and embracing fun with informal team meetings and activities. We genuinely enjoy getting to know each other beyond our technical skills — because great work is even better when you’re part of a great team.

About the Role

As a Senior Cybersecurity Engineer on the Network Security team, you’ll play a key role in designing, building, and operating the security controls that protect Workday’s customer data environments and our own Workmates across AWS, GCP, private cloud, and enterprise infrastructure. You’ll be both a hands‑on builder and a technical leader: architecting scalable network security solutions, automating security control deployment and enforcement, mentoring team members, and partnering across the organization to ensure security is embedded into the way we design and operate systems.

In this role, you will be responsible to:

• Architect and Build: Design and implement next‑generation network security controls, patterns, and templates across AWS, GCP, private cloud, and enterprise environments.
• Automate: Enhance the security of the enterprise by building scalable systems for effective continuous monitoring and enforcement of expected security posture using tools such as Terraform, GoLang, and Python.
• Mentor: Serve as a technical lead by driving initiatives forward and guiding team members in their development.
• Consult: Evaluate production infrastructure designs to determine security requirements and conduct rigorous network security assessments.
• Collaborate: Partner with Cybersecurity and Trust teams to develop policies, standards, and guidelines aligned with industry best practices (CIS, NIST, FedRAMP) and implement control enforcement against those standards.
• Deliver Operational Excellence: Provide operational support for critical security infrastructure, including DDoS detection, WAF, and firewall controls (appliances and cloud‑native) in a production environment.

On the Network Security team at Workday, you’ll help protect environments that support some of the world’s most trusted organizations and the people that run them. If you’re passionate about building scalable security solutions, advancing cloud network security controls in a dynamic landscape, and helping teams operate securely at scale, we’d love to hear from you.

Basic Qualifications

• Minimum of 7 years of experience in network security architecture, engineering, and design
• Hands‑on experience deploying network security controls across AWS and/or GCP
• Experience with cloud‑native security technologies such as AWS Network Firewall, AWS WAF, GCP Cloud Armor, or controls
• Has experience with at least one scripting or programming language, such as Python or Go
• Experience with infrastructure automation tools such as Terraform, Ansible, Consul, or similar technologies
• Experience designing, implementing, or managing zero trust architectures or SASE solutions, including identity‑aware access, software‑defined perimeters, and secure remote access frameworks

Other Qualifications

• Proven experience delivering network security initiatives in production, customer‑facing environments
• Deep understanding of public cloud networking and security across AWS and GCP, with the ability to design secure architectures for multi‑cloud and hybrid environments
• Experience evaluating, implementing, and operating security platforms, including firewalls, web application firewalls, DDoS protection, and cloud‑native network security controls
• Strong understanding of application, system, and network security threats, attack techniques, and mitigating controls
• Experience implementing security policies and supporting compliance with data protection and security standards
• Ability to leverage AI and agentic capabilities to streamline engineering workflows, improve consistency, and deliver security solutions at scale
• Experience supporting DDoS detection, IPS/IDS tooling, and participating in an on‑call rotation for production networks
• Ability to align security programs with industry standards such as CIS, NIST, and FedRAMP
• Ability to clearly document complex security architectures, decisions, and control implementations
• Excellent written and verbal communication skills, with the ability to build strong relationships with technical and non‑technical stakeholders

Workday Pay Transparency Statement

The annualized base salary ranges for the primary location and any additional locations are listed below.

Workday pay ranges vary based on work location.

Primary Location: USA.GA.Atlanta

Primary Location Base Pay Range: $152,000 USD - $228,000 USD

Additional US Location(s) Base Pay Range: $144,400 USD - $258,000 USD

Recruiters can share more detail during the hiring process.

Each candidate’s compensation offer will be based on multiple factors including, but not limited to, geography, experience, skills, job duties, and business need, among other things.

For more information regarding Workday’s comprehensive benefits, please contact Us.

Our Approach to Flexible Work

With Flex Work, we’re combining the best of both worlds: in‑person time and remote. Our approach enables our teams to deepen connections, maintain a strong community, and do their best work. We know that flexibility can take shape in many ways, so rather than a number of required days in‑office each week, we simply spend at least half (50%) of our time each quarter in the office or in the field with our customers, prospects, and partners (depending on role). This means you’ll have the freedom to create a flexible schedule that caters to your business, team, and personal needs, while being intentional to make the most of time spent together. Those in our remote "home office" roles also have the opportunity to come together in our offices for important moments that matter.

Workday will consider for employment qualified applicants with arrest and conviction records. Workday is an Equal Opportunity Employer including individuals with disabilities and protected veterans. Workday is committed to providing reasonable accommodations for qualified individuals during our application process, in order to perform one or more essential functions of their job, as well as regarding the use of AI tools for employment decision‑making to any degree. Please see below for more details including how to request an accommodation as a qualified veteran, due to a disability or for religious reasons, or as otherwise provided under applicable law. Workday prohibits taking adverse action against any candidate or employee for reporting a possible violation of this policy, requesting one or more work accommodations, exercising a privacy right, or cooperating in an investigation in accordance with applicable law. If you require a reasonable accommodation, you may email [e-mail], as far in advance as possible.

We do not accept resumes from headhunters, placement agencies, or other suppliers that have not signed a formal agreement with us. Further, pursuant to applicable local ordinances, Workday will consider for employment qualified applicants with arrest and conviction records.