Principal Cyber Security Engineer US Federal

Workday•Reston, VA

1d•$167,200 - $300,000•Hybrid

About The Position

This role will support one or more direct or indirect contracts with the U.S. Federal Government which, due to federal government security requirements, mandates that all Workday personnel working on the contracts be United States citizens (naturalized or native). The infrastructure cybersecurity engineering team is responsible for building, deploying and operating security tooling, as well as providing consulting to service teams. Innovation and creativity are heavily emphasized upon and encouraged at Workday to combat an ever evolving threat landscape. The tools, processes and standards developed by the team are a critical part of the threat defense capabilities of Workday. Having an infrastructure presence in both public and private clouds, the team is repeatedly challenged in new ways to improve existing toolchains and build new ones. Candidates for this role should have an analytical and problem solving approach, capability to learn new skills, comfortable with accepting feedback and able to work well with a team.

Requirements

Must already possess a valid and active TS/SCI with CI polygraph security clearance.
Experience with Linux operating systems or containers
Experience with development/scripting/automation language
Knowledge of cloud security, AWS or GCP
Knowledge of threat modeling, security policy, NIST 800-53 security standards and functional requirements
United States citizen (naturalized or native)

Nice To Haves

Infrastructure as Code (IaC) development
Knowledge of Kubernetes
Experience with CI/CD
Knowledge of REST API and HTTP protocol
Experience with container security
Knowledge of common encryption functions and authorization schemas
Preferred DoD 8570/8140 compliant with at least IAT Level Il certification, including a current Computing Environment (CE) credential and one approved specialty certification (e.g., CompTIA CySA+, GICSP, CASP+)

Responsibilities

Build, deploy, and operate security tooling.
Provide consulting to service teams.
Develop using industry standard languages.
Improve existing toolchains and build new ones.
Address common security issues systematically and at scale through frameworks, tooling and automation.