Data Platform Engineer - Cybersecurity

Your work days are brighter here. We’re obsessed with making hard work pay off, for our people, our customers, and the world around us. As a Fortune 500 company and a leading AI platform for managing people, money, and agents, we’re shaping the future of work so teams can reach their potential and focus on what matters most. The minute you join, you’ll feel it. Not just in the products we build, but in how we show up for each other. Our culture is rooted in integrity, empathy, and shared enthusiasm. We’re in this together, tackling big challenges with bold ideas and genuine care. We look for curious minds and courageous collaborators who bring sun-drenched optimism and drive. Whether you're building smarter solutions, supporting customers, or creating a space where everyone belongs, you’ll do meaningful work with Workmates who’ve got your back. In return, we’ll give you the trust to take risks, the tools to grow, the skills to develop and the support of a company invested in you for the long haul. So, if you want to inspire a brighter work day for everyone, including yourself, you’ve found a match in Workday, and we hope to be a match for you too. About the Team We are a newly formed, forward-looking Cybersecurity Data Engineering & Platform Team driving the future of our enterprise defense strategy. Our mission is to build a next-generation, centralized data lakehouse that unifies all security telemetry into a single, high-performance ecosystem. Operating across two specialized verticals—Data Logistics (ingestion, enrichment, and semantic layers) and Data Platform (foundational infrastructure, security architecture, and AI enablement)—we are designing a scalable, cloud-native foundation from the ground up. By combining cutting-edge data architecture with advanced analytics, we empower our threat hunters, data scientists, and incident responders with the real-time, trusted intelligence needed to protect the enterprise at scale. The Data Platform Vertical As a member of the Data Platform vertical, you are joining the infrastructure backbone of this global organization. Operating across distributed hubs in Dublin, US, and New Zealand, we are the team responsible for ensuring the underlying architecture is highly performant, automated, and governed by strict enterprise standards. We are actively moving away from our SIEM-based data platform toward a modern, Infrastructure-as-Code (IaC) model. Crucially, our Dublin team serves as the anchor for our EU Sovereign operations, ensuring our modernized platform meets the strict data residency, isolation, and compliance mandates required to protect our European region. About the Role As a Cybersecurity Data Platform Engineer , you will bring a software engineering approach to system administration and operations. While our Principal engineers architect the overarching system, your mission is to defend its reliability, scale it efficiently, and aggressively automate away manual toil. We are actively transitioning away from a legacy, SIEM-centric environment that suffers from severe resource exhaustion, and we need a dedicated platform engineer to ensure our new infrastructure remains highly available, performant, and resilient. Crucially, based in our Dublin hub, you will serve as the dedicated platform operator for our EU Sovereign Region. You will ensure that the daily operations, automation, and administration of the platform strictly adhere to European data residency, isolation, and compliance regulations. In this role, you will be on the front lines of platform health, defining reliability metrics, troubleshooting complex bottlenecks, and ensuring our Data Engineering and Incident Response teams always have a rock-solid foundation to execute their missions. What You Will Drive Platform Operations & Reliability: Manage the day-to-day administration, configuration, and capacity planning for our modernized cybersecurity data platform to ensure maximum uptime and stability. EU Sovereign Administration: Act as the dedicated, hands-on operator for our EU Sovereign Region, strictly adhering to established data residency and isolation protocols in all deployments and incident responses. Defending Service Levels & Observability: Define and track Service Level Indicators (SLIs) and Objectives (SLOs) for platform health, compute usage, and storage capacity. You will actively monitor these metrics to proactively troubleshoot bottlenecks before they impact users. Toil Reduction & IaC Execution: Treat operations as a software problem. You will utilize, maintain, and write Infrastructure-as-Code (IaC) and automation scripts to eliminate manual operational toil, streamline deployments, and enable auto-scaling. Guardrails & Incident Response: Implement resource quotas and technical guardrails to protect the platform from noisy neighbors. When issues do occur, you will lead troubleshooting efforts and participate in blameless post-mortems to ensure systemic issues are fixed in code. About You You are an engineer who treats operations as a software problem. You have a deep preference for scripting and automating your way out of repetitive tasks. You understand that in a cybersecurity environment, platform downtime directly impacts enterprise defense, so you are dedicated to defending system stability and uptime. Most importantly, you understand that supporting a global security mission means following strict rules around access, governance, and compliance. Basic Qualifications 4+ years of hands-on experience in cloud infrastructure operations, platform engineering, or reliability engineering 4+ years of experience administering enterprise Linux environments 4+ years operating within major cloud platforms (AWS, GCP, or Azure), 2+ years experience with compute, storage, networking, and Identity Access Management (IAM) Other Qualifications Bachelor's degree in a relevant discipline such as Computer Science, Cybersecurity, Information Security, or a related field, or equivalent practical experience Metrics and Observability: Practical experience building and managing monitoring, alerting, and logging platforms (e.g., Datadog, Prometheus, Grafana) to track SLIs/SLOs and troubleshoot performance bottlenecks proactively. You don't wait for users to report an outage — you catch issues before they surface. Scripting and Infrastructure-as-Code: Hands-on experience writing and maintaining scripts (Python, Bash, Go) and working with IaC tools (e.g., Terraform, Ansible, CloudFormation). You know how to safely modify and deploy automation to eliminate manual work and streamline routine operations. Platform and Cloud Security Fundamentals: Understanding of platform, network, application, and cloud security fundamentals, tools, and concepts, with the ability to apply automation to ensure desired and consistent security configurations are maintained. Compliance and Governance Awareness: Familiarity with data residency, isolation, and regulatory compliance requirements, particularly within a European or EU Sovereign context. You understand that supporting a global security mission means adhering to strict rules around access and governance. Ability to manage multiple projects and priorities while handling operational responsibilities Excellent written and verbal communication skills, with the ability to build positive relationships with partner teams across global time zones Workday Pay Transparency Statement (For EU Locations Only) Listed below is the base salary range applicable to this position. Workday pay ranges (and the precise pay offered to the successful candidate) are based on a number of objective criteria such as relevant experience and skills, and educational qualifications, level of responsibility, demands of the role, work location and business need. As a part of the total compensation package, this role may be eligible for the Workday Bonus Plan or a role-specific commission/bonus, as well as annual refresh st