Network Security Policy Engineer

At GoDaddy the future of work looks different for each team. Some teams work in the office full-time; others have a hybrid arrangement (they work remotely some days and in the office some days) and some work entirely remotely.​

This is a remote position, so you’ll be working remotely from your home. You may occasionally visit a GoDaddy office to meet with your team for events or meetings.  

• →Audit firewall, segmentation, and zone-to-zone policy to find overly permissive, unused, shadowed, and drifted rules, and report on zone posture and risk
• →Review connectivity requests from application and platform teams, and partner with them to redesign requests that don't fit approved patterns
• →Write and maintain firewall rules, ACLs, routing, and segmentation changes with strong change-management rigor
• →Manage temporary ACLs and policy exceptions fully, from designated owner and expiry to remediation
• →Build automated checks that catch non-compliant policy before production, and replace manual governance work with repeatable jobs

• 3+ years in network engineering, network security, or infrastructure operations supporting a large production environment
• Hands-on firewall policy experience on an enterprise platform such as Juniper SRX or Palo Alto Networks, including troubleshooting with logs and packet captures
• Strong TCP/IP, routing, NAT, and DNS fundamentals, and the ability to write ACLs across network devices, hosts, and public cloud
• Solid understanding of security zones, segmentation, and least-privilege access, including AWS networking (VPCs, transit gateways, security groups)
• Python scripting to query APIs, parse rule and log data, and automate recurring tasks
• Clear written communication and experience managing requests from start to finish with engineering teams, including suggesting alternatives when a request can't be approved as written
• Experience using AI tools to solve real problems, and knowing where they fall short

• Experience with Tufin or similar policy governance tools!
• Experience with microsegmentation platforms such as Illumio
• Policy-as-code experience using Git and CI/CD (e.g., GitHub Actions)
• Exposure to IDS/IPS or NDR platforms
• Certifications such as JNCIS, PCNSE, CCNP Security, or AWS Advanced Networking

We encourage you to apply even if your experience or skillset doesn’t align perfectly with every requirement. We value a wide range of backgrounds and transferable skills, and we are excited to support learning and growth.