Network Security Policy Engineer

Location Details: Remote, India 

At GoDaddy the future of work looks different for each team. Some teams work in the office full-time; others have a hybrid arrangement (they work remotely some days and in the office some days) and some work entirely remotely.​

This is a remote position, so you’ll be working remotely from your home. You may occasionally visit a GoDaddy office to meet with your team for events or meetings.  

**Join Our Team...
GoDaddy's Network Security Engineering and Operations team is searching for a Network Security Policy Engineer to coordinate the quality of network access rules within our hybrid environment. Do you enjoy unraveling the puzzle of application connectivity, determining what an application genuinely needs and crafting access that supports teams without broadening exposure?
You will audit and control policies throughout our security zones in this role. Additionally, you will check connectivity requests against approved models and develop governance automation to expand with our environment!

What you'll get to do...
**

• Audit firewall, segmentation, and zone-to-zone policy to find overly permissive, unused, shadowed, and drifted rules, and report on zone posture and risk
• Review connectivity requests from application and platform teams, and partner with them to redesign requests that don't fit approved patterns
• Write and maintain firewall rules, ACLs, routing, and segmentation changes with strong change-management rigor
• Manage temporary ACLs and policy exceptions fully, from designated owner and expiry to remediation
• Build automated checks that catch non-compliant policy before production, and replace manual governance work with repeatable jobs

Your experience should include...

• 3+ years in network engineering, network security, or infrastructure operations supporting a large production environment
• Hands-on firewall policy experience on an enterprise platform such as Juniper SRX or Palo Alto Networks, including troubleshooting with logs and packet captures
• Strong TCP/IP, routing, NAT, and DNS fundamentals, and the ability to write ACLs across network devices, hosts, and public cloud
• Solid understanding of security zones, segmentation, and least-privilege access, including AWS networking (VPCs, transit gateways, security groups)
• Python scripting to query APIs, parse rule and log data, and automate recurring tasks
• Clear written communication and experience managing requests from start to finish with engineering teams, including suggesting alternatives when a request can't be approved as written