About the role
GoDaddy's Network Security Engineering and Operations team is looking for a Network Security Automation Engineer to build and run the software that manages network security at scale. Are you equally comfortable reading a firewall rule base and a CI pipeline?
In this role, you'll own the internal APIs and risk engine behind our network policy management, automate our operational workflows, and find the problems nobody has filed a ticket for! Because this tooling holds privileged access to the network, the role requires real security judgment, not just software skills.
Responsibilities:
- Own and extend the internal APIs and services that drive network security policy management, including our risk calculation engine.
- Automate operational workflows from request intake and validation through change execution, evidence capture and reporting.
- Write, test and maintain production code, partnering with our SRE team on deployment, monitoring and release.
- Integrate with firewalls, segmentation platforms, asset sources, ticketing and network detection tooling through their APIs.
- Help stand up network detection and response capability and automate detection validation across NDR, IDS and IPS.
Requirements:
- 3+ years in network security, network engineering, infrastructure automation or a platform/tooling role, with tools and services you've built and shipped.
- Strong Python proficiency, with tested, maintainable production code.
- Demonstrated network security depth: firewall policy, segmentation, ACLs and routing across devices, hosts and cloud.
- Experience with Git and CI/CD, and enough understanding of containerised deployment to work effectively with SRE teams.
- Fluency with REST APIs, TLS and certificates, and secure coding practices.
- Ability to take a loosely defined problem, propose an approach and deliver it independently.
- Experience using AI tools to solve real engineering problems, with the judgment to know when the output is wrong.
You might also have.
- Experience with Juniper SRX, Palo Alto Networks, Tufin or Illumio.
- Infrastructure-as-code experience with Terraform, CloudFormation or Kubernetes; AWS networking, IAM and serverless automation experience.
- Experience automating detections on NDR, IDS or IPS platforms.
- Experience working with flow data, firewall and DNS logs, or SIEM platforms.