Data Platform Engineer - Cybersecurity

Your work days are brighter here.

We’re obsessed with making hard work pay off, for our people, our customers, and the world around us. As a Fortune 500 company and a leading AI platform for managing people, money, and agents, we’re shaping the future of work so teams can reach their potential and focus on what matters most. The minute you join, you’ll feel it. Not just in the products we build, but in how we show up for each other. Our culture is rooted in integrity, empathy, and shared enthusiasm. We’re in this together, tackling big challenges with bold ideas and genuine care. We look for curious minds and courageous collaborators who bring sun-drenched optimism and drive. Whether you're building smarter solutions, supporting customers, or creating a space where everyone belongs, you’ll do meaningful work with Workmates who’ve got your back. In return, we’ll give you the trust to take risks, the tools to grow, the skills to develop and the support of a company invested in you for the long haul. So, if you want to inspire a brighter work day for everyone, including yourself, you’ve found a match in Workday, and we hope to be a match for you too.

About the Team

We are a newly formed, forward-looking Cybersecurity Data Engineering & Platform Team driving the future of our enterprise defense strategy. Our mission is to build a next-generation, centralized data lakehouse that unifies all security telemetry into a single, high-performance ecosystem. Operating across two specialized verticals-Data Logistics (ingestion, enrichment, and semantic layers) and Data Platform (foundational infrastructure, security architecture, and AI enablement)-we are designing a scalable, cloud-native foundation from the ground up. By combining cutting-edge data architecture with advanced analytics, we empower our threat hunters, data scientists, and incident responders with the real-time, trusted intelligence needed to protect the enterprise at scale.

The Data Platform Vertical

As a member of the Data Platform vertical, you are joining the infrastructure backbone of this global organization. Operating across distributed hubs in Dublin, US, and New Zealand, we are the team responsible for ensuring the underlying architecture is highly performant, automated, and governed by strict enterprise standards. We are actively moving away from our SIEM-based data platform toward a modern, Infrastructure-as-Code (IaC) model. Crucially, our Dublin team serves as the anchor for our EU Sovereign operations, ensuring our modernized platform meets the strict data residency, isolation, and compliance mandates required to protect our European region.

About the Role

As a Cybersecurity Data Platform Engineer, you will bring hands-on data engineering expertise together with a strong Site Reliability Engineering (SRE) mindset. While our Principal engineers architect the overarching system, your mission is to build, operate, and defend the reliability of our data pipelines and platform - scaling them efficiently and aggressively automating away manual toil. You will be the primary resource for break-fix, operational troubleshooting, and day-to-day care of our data pipelines and platform tooling, including Splunk during our transition away from a legacy, SIEM-centric environment that suffers from severe resource exhaustion. Prior Splunk experience is a bonus, not a requirement - we're glad to train the right person who brings strong data engineering, SRE/ops, cloud, and Linux fundamentals.

Crucially, based in our Dublin hub, you will serve as the dedicated platform operator for our EU Sovereign Region. You will ensure that the daily operations, automation, and administration of the platform strictly adhere to European data residency, isolation, and compliance regulations.

In this role, you will be on the front lines of data pipeline and platform health, defining reliability metrics, troubleshooting complex pipeline and infrastructure bottlenecks, and ensuring our Data Engineering and Incident Response teams always have a rock-solid foundation to execute their missions.

What You Will Drive:

• Data Pipeline & Platform Operations: Own the day-to-day administration, break-fix, and operational troubleshooting of our data pipelines and the broader cybersecurity data platform - including Splunk during our SIEM-to-IaC transition - to ensure maximum uptime, data flow integrity, and stability.
• EU Sovereign Administration: Act as the dedicated, hands-on operator for our EU Sovereign Region, strictly adhering to established data residency and isolation protocols in all deployments and incident responses.
• Defending Service Levels & Observability: Define and track Service Level Indicators (SLIs) and Objectives (SLOs) for platform health, compute usage, and storage capacity. You will actively monitor these metrics to proactively troubleshoot bottlenecks before they impact users.
• Toil Reduction & IaC Execution: Treat operations as a software problem. You will utilize, maintain, and write Infrastructure-as-Code (IaC) and automation scripts to eliminate manual operational toil, streamline deployments, and enable auto-scaling.
• Guardrails & Incident Response: Implement resource quotas and technical guardrails to protect the platform from noisy neighbors. When issues do occur, you will lead troubleshooting efforts and participate in blameless post-mortems to ensure systemic issues are fixed in code.

About You

You are an engineer who treats operations as a software problem. You have a deep preference for scripting and automating your way out of repetitive tasks. You understand that in a cybersecurity environment, platform downtime directly impacts enterprise defense, so you are dedicated to defending system stability and uptime. Most importantly, you understand that supporting a global security mission means following strict rules around access, governance, and compliance.

Basic Qualifications

• 4+ years of hands-on experience in data engineering, cloud infrastructure operations, platform engineering, or site reliability engineering (SRE)
• 4+ years of experience administering enterprise Linux environments
• 4+ years operating within major cloud platforms (AWS, GCP, or Azure),
• 2+ years experience with compute, storage, networking, and Identity Access Management (IAM)
• 2+ years of experience building, maintaining, or operating data pipelines (e.g., ETL/ELT, streaming, or batch processing)

Other Qualifications

• Bachelor's degree in a relevant discipline such as Computer Science, Cybersecurity, Information Security, or a related field, or equivalent practical experience
• Metrics and Observability: Practical experience building and managing monitoring, alerting, and logging platforms (e.g., Datadog, Prometheus, Grafana) to track SLIs/SLOs and troubleshoot performance bottlenecks proactively. You don't wait for users to report an outage - you catch issues before they surface.
• Scripting and Infrastructure-as-Code: Hands-on experience writing and maintaining scripts (Python, Bash, Go) and working with IaC tools (e.g., Terraform, Ansible, CloudFormation). You know how to safely modify and deploy automation to eliminate manual work and streamline routine operations.
• Platform and Cloud Security Fundamentals: Understanding of platform, network, application, and cloud security fundamentals, tools, and concepts, with the ability to apply automation to ensure desired and consistent security configurations are maintained.
• Compliance and Governance Awareness: Familiarity with data residency, isolation, and regulatory compliance requirements, particularly within a European or EU Sovereign context. You understand that supporting a global security mission means adhering to strict rules around access and governance.
• Bonus: Hands-on experience with Splunk (administration, search, or troubleshooting) - not required, but valuable given our current environment; we're happy to train the right candidate.
• Bonus: Experience with data reliability engineering - data quality monitoring, pipeline SLAs/SLOs, or data observability tooling.
• Ability to manage multiple projects and priorities while handling operational responsibilities
• Excellent written and verbal communication skills, with the ability to build positive relationships with partner teams across global time zones

Workday Pay Transparency Statement (For EU Locations Only)

Listed below is the base salary range applicable to this position. Workday pay ranges (and the precise pay offered to the successful candidate) are based on a number of objective criteria such as relevant experience and skills, and educational qualifications, level of responsibility, demands of the role, work location and business need. As a part of the total compensation package, this role may be eligible for the Workday Bonus Plan or a role-specific commission/bonus, as well as annual refresh stock grants awarded by Workday Inc. For more information regarding Workday’s comprehensive benefits, please click here.

Our Approach to Flexible Work

With Flex Work, we’re combining the best of both worlds: in-person time and remote. Our approach enables our teams to deepen connections, maintain a strong community, and do their best work. We know that flexibility can take shape in many ways, so rather than a number of required days in-office each week, we simply spend at least half (50%) of our time each quarter in the office or in the field with our customers, prospects, and partners (depending on role). This means you'll have the freedom to create a flexible schedule that caters to your business, team, and personal needs, while being intentional to make the most of time spent together. Those in our remote "home office" roles also have the opportunity to come together in our offices for important moments that matter.

Pursuant to applicable Fair Chance law, Workday will consider for employment qualified applicants with arrest and conviction records.

Workday is an Equal Opportunity Employer including individuals with disabilities and protected veterans.

Workday is committed to providing reasonable accommodations for qualified individuals during our application process, in order to perform one or more essential functions of their job, as well as regarding the use of AI tools for employment decision-making to any degree. Please see below for more details including how to request an accommodation as a qualified veteran, due to a disability or for religious reasons, or as otherwise provided under applicable law.

Workday prohibits taking adverse action against any candidate or employee for reporting a possible violation of this policy, requesting one or more work accommodations, exercising a privacy right, or cooperating in an investigation in accordance with applicable law. Any employee who retaliates against a candidate or employee for doing so may be subject to disciplinary action, up to and including termination of employment, to the fullest extent allowable under applicable law.

If you require a reasonable accommodation, you may email [email protected], as far in advance as possible.

Are you being referred to one of our roles? If so, ask your connection at Workday about our Employee Referral process!

At Workday, we value our candidates’ privacy and data security. Workday will never ask candidates to apply to jobs through websites that are not Workday Careers.

Please be aware of sites that may ask for you to input your data in connection with a job posting that appears to be from Workday but is not.

In addition, Workday will never ask candidates to pay a recruiting fee, or pay for consulting or coaching services, in order to apply for a job at Workday.