{"id":2902449,"url":"https://alion.io/job/cdkglobal-security-engineer","title":"Security Engineer","company":{"id":4851,"name":"Cdkglobal","domain":"cdkglobal.com","url":"https://alion.io/company/cdkglobal","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Hyderabad, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":14000,"max_usd":34000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":774},"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Self-Healing","optional":false},{"name":"Shift-Left Security","optional":false},{"name":"Zero Trust","optional":false},{"name":"Amazon EKS","optional":true},{"name":"AWS","optional":true},{"name":"Azure AKS","optional":true},{"name":"Azure DevOps","optional":true},{"name":"Bicep","optional":true},{"name":"CloudFormation","optional":true},{"name":"Cortex","optional":true},{"name":"GitHub Actions","optional":true},{"name":"Go","optional":true},{"name":"Kubernetes","optional":true},{"name":"Microsoft Entra ID","optional":true},{"name":"Microsoft Sentinel","optional":true},{"name":"PowerShell","optional":true},{"name":"Prometheus","optional":true},{"name":"Python","optional":true},{"name":"Service Mesh","optional":true},{"name":"Terraform","optional":true}],"status":"live","first_seen_at":"2026-10-07T00:00:00Z","employer_posted_date":"2026-10-07","last_verified_at":"2026-10-22T02:39:58Z","board_verified":false,"closed_at":null,"days_open":17,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":17},"description":"About Us\nCDK Global is a leading provider of cloud-based software to dealerships and Original Equipment Manufacturers (“OEMs”) across automotive and related industries. The Company’s cloud-based, software as a service (“SaaS”) platform enables dealerships to manage their end-to-end business operations including the acquisition, sale, financing, insuring, repair, and maintenance of vehicles. By automating and streamlining critical workflows, the integrated platform of modern solutions enables dealers to sell and service more vehicles by creating simple and convenient experiences for customers and improves their financial and operational performance.\nPosition Summary\nAs a Platform Security Engineer, you will play a pivotal role in shaping and securing our cloud and on-premises compute infrastructure. You will be responsible for implementing and maintaining robust security solutions for our Cloud environments. This role requires a deep understanding of security principles, cloud technologies and infrastructure as code practices. As a Platform Security Engineer, you will participate in security reviews, design and develop innovative security solutions and tools to enhance our security posture and visibility.\nResponsibilities\nLeadership & Technical Strategy\nArchitect the North Star: Define and establish the multi-year cloud security roadmap, aligning technical debt reduction with business velocity.\nStrategic Influence: Partner with business stakeholders to ensure security is a core architectural pillar and a fundamental requirement in all product development.\nCoE Leadership: Provide technical leadership to the Security Center of Excellence (CoE), aligning the Security Champions’ roadmap with platform engineering goals to ensure a consistent security posture across all environments.\nData-Driven Governance: Define high-level KPIs (e.g., MTTR, Policy Coverage, Identity Risk scores) to provide executive visibility and drive cross-functional accountability for platform risk.\nCloud Security Architecture & Engineering\nScalable Governance: Architect and govern multi-tenant cloud environments using standardized landing zone patterns (e.g., CAF or Control Tower). Establish global guardrails that balance developer velocity with enterprise security requirements.\nIdentity Governance: Architect a Zero Trust identity ecosystem centering on automated Conditional Access, Just-In-Time (JIT) elevation via Privileged Identity Management (PIM), and Workload Identity Federation to eliminate standing high-privileged access.\nZero Trust Networking: Oversee the transition to a Zero Trust network architecture. Implement deep-defense strategies including private connectivity, centralized egress/ingress control, and application-layer protection.\nPolicy-as-Code & IaC Governance\nScalable Guardrails: Transition from manual reviews to automated governance using Policy-as-Code (e.g., Azure Policy, OPA) to enforce \"Security by Default\" across the infrastructure lifecycle.\nStandardized Modules: Develop and maintain a library of \"Hardened\" Infrastructure-as-Code (IaC) modules to provide pre-configured, compliant templates for common cloud services.\nDrift Management: Implement automated detection and remediation systems to identify and resolve infrastructure drift across cloud subscriptions.\nAutomated Remediation and Orchestration\nAutonomous Remediation: Design event-driven automation and SOAR playbooks to identify and remediate configuration drift and routine threats in real-time, enabling a \"Self-Healing\" infrastructure.\nShift-Left Architecture: Integrate automated security \"gates\" into CI/CD pipelines, including IaC scanning and container analysis, ensuring security feedback is delivered directly to engineers within their existing workflows.\nOperational Efficiency: Develop custom automation and scripting to eliminate manual security tasks, focusing on reducing the \"Mean Time to Remediate\" (MTTR) for critical platform vulnerabilities.\nPreferred Qualifications\nTechnical Architecture & Engineering\nAdvanced Cloud Mastery: 4+ years of experience in Infrastructure or Security Engineering, with a deep architectural focus on Azure Enterprise environments (Management Groups, ALZ, and complex networking).\nIdentity & Zero Trust Expert: Proven track record of designing and implementing Zero Trust identity frameworks, specifically leveraging Microsoft Entra ID (PIM, Conditional Access) and Workload Identity Federation at scale.\nSystems Design: Strong ability to architect \"Security-by-Design\" patterns that solve for the entire lifecycle of a resource, from initial IaC commit to runtime protection.\nAutomation & Code Proficiency\nInfrastructure as Code (IaC) Expert: Expert-level proficiency with Terraform (including module development and provider management) and cloud-native templates (Bicep/ARM/AWS CloudFormation).\nEngineering Mindset: Proficiency in Python, Go, or PowerShell for building custom security tooling, automation, and API integrations. Experience with Policy-as-Code frameworks (e.g., OPA/Rego, Azure Policy) is highly preferred.\nPipeline Security: Hands-on experience architecting security gates and automated scanning within GitHub Actions or Azure DevOps pipelines.\nLeadership & Strategic Impact\nStrategic Influence: Experience leading large-scale technical initiatives that require cross-functional alignment across technical and non-technical stakeholders to align security goals with business priorities.\nMentorship & CoE: Demonstrated experience by mentoring senior engineers and providing technical steering within a Security Center of Excellence (CoE).\nMetric-Driven Governance: Ability to define and report on technical risk through data (MTTR, posture trends) to drive organizational accountability.\nDesired Qualifications\nIndustry Frameworks: Deep familiarity with the Microsoft Cloud Adoption Framework (CAF) and Well-Architected Frameworks.\nContainer Security: Extensive experience securing Kubernetes (AKS/EKS) and containerized workloads, including service mesh and admission controllers.\nAdvanced Certification: Professional-level certifications such as AZ-500, SC-100 (Cybersecurity Architect), CISSP, or CCSP.\nSecurity Platform Expertise: Experience architecting enterprise-scale CNAPP, XDR, or SOAR solutions (e.g., Palo Alto/Cortex, Microsoft Sentinel).\nEqual Employment Opportunity (EEO)\nAt CDK, we believe inclusion and diversity are essential in inspiring meaningful connections among our people. We foster an open and inclusive environment where diverse perspectives are valued, enabling everyone to bring their authentic selves to work and make a meaningful impact.\nCDK is an Equal Opportunity Employer committed to creating an inclusive workplace where all employees and applicants are treated with fairness, dignity, and respect. Employment decisions are made without regard to race, color, caste, religion, creed, gender, gender identity or expression, sexual orientation, age, marital status, disability, nationality, ethnic origin, or any other characteristic protected under applicable law.\nNon-Discrimination and Reasonable Accommodation\nEmployees must be able to perform the essential functions of their role satisfactorily. CDK is committed to providing reasonable accommodations to qualified individuals with disabilities or other protected needs in accordance with applicable laws, unless doing so would impose an undue hardship on the organization. CDK retains the right to change or assign other duties to this position as needed.","description_format":"text","description_chars":7519,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Automotive Software"],"lifecycle":[{"event":"open","at":"2026-10-20T06:58:04Z"}],"visa":[],"liveness":{"score":61,"band":"ok","label":"Likely open","p_open":1,"p_active":0.818,"p_room":0.75,"age_days":16,"expected_fill_days":21,"reasons":["conf:27","velocity","win:late"],"computed_at":"2026-10-23T05:54:15Z"},"pay":null,"html_url":"https://alion.io/job/cdkglobal-security-engineer","json_url":"https://alion.io/job/cdkglobal-security-engineer.json","meta":{"generated_at":"2026-10-24T05:54:58Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8519,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4851},"rest":"https://alion.io/mcp/rest/get_company?id=4851"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcdkglobal-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcdkglobal-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcdkglobal-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cdkglobal-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcdkglobal-security-engineer"}]}