Skip to main content
CareerApp

Principal Cybersecurity Engineer - US Federal

Workday

Reston, VA · full time · Principal

$184,800 – $277,200

Listed on Workday’s own careers site. You apply with them directly — we never stand between you and the employer.

What this role is

This role builds and maintains the security infrastructure that protects Workday's platform for federal government customers, focusing on cloud-native tools like vulnerability management and SIEM systems. It suits engineers who excel at infrastructure-as-code, Kubernetes, and Python automation, and who thrive owning complex security architecture end-to-end.

Our summary, not Workday’s wording. The full posting is on their site.

What they ask for

Required

  • Deep AWS experience across Compute, Storage, Networking, and Security
  • Heavy hands-on Kubernetes and Docker experience including lifecycle management and security hardening
  • Advanced Python proficiency
  • Terraform or equivalent infrastructure-as-code experience
  • Ability to leverage AI tools for problem-solving and acceleration
  • Ability to distill complex technical data into visual insights for stakeholders
  • U.S. citizenship (naturalized or native) for federal contract work
  • Ability to obtain and maintain U.S. government security clearance

Nice to have

  • Active TS/SCI w/CI Poly security clearance
  • DoD 8570/8140 compliance with IAT Level II certification, CE credential, and approved specialty certification (CompTIA CySA+, GICSP, CASP+)
  • CI/CD pipeline experience in GitLab CI, GitHub Actions, or Jenkins
  • Amazon EKS production workload management experience
  • SaaS platform security at scale experience
  • Willingness to be on-site at DMV area client locations

Turn on analytics and we load Google Analytics: Google gets the pages you open and what you do here — searches, jobs you view, jobs you apply to — and sets its own cookies. Leave it off and the only cookies we set are your login, your theme, and this answer. Accept All also records a yes to advertising, which nothing uses yet. Privacy Policy.