Sr. Network Security Engineer

Why UKG:  
At UKG, the work you do matters. The code you ship, the decisions you make, and the care you show a customer all add up to real impact. Today, tens of millions of workers start and end their days with our workforce operating platform. Helping people get paid, grow in their careers, and shape the future of their industries. That’s what we do.

We never stop learning. We never stop challenging the norm. We push for better, and we celebrate the wins along the way. Here, you’ll get flexibility that’s real, benefits you can count on, and a team that succeeds together. Because at UKG, your work matters—and so do yo

About the Role:
At UKG, security is at the core of everything we do. We are looking for a Sr. Network Security Engineer who has experience in security-related technologies such as Next Generation Firewalls, intrusion detection, DLP, Email Security, DDOS/WAF, and Zero Trust Network Architecture technologies to join our team. This role requires the ability to leverage modern tools—including AI-driven capabilities—to improve threat detection, response, and overall network security posture.

The Sr. Network Security Engineer will be responsible for designing, implementing, maintaining, and documenting security solutions and related security controls throughout the Enterprise. This includes managing security tools and tasks that will include installing, configuring, and updating hardware and software; establishing and managing user accounts; overseeing or conducting backup and recovery tasks; implementing operational and technical security controls; and adhering to organizational security policies and procedures.

**This is a hybrid role. The employee will be expected to work onsite at a UKG office 3 days/week**

Duties and Responsibilities:
• Architect and operate defense-in-depth network security controls across cloud and on-prem environments
• Continuously tune IPS, WAF, and DDoS protections against real-world attack patterns
• Implement and enforce ZTNA and DLP strategies that hold up under pressure—not just in audits
• Actively hunt for weaknesses in network design, segmentation, and traffic flows
• Lead response to high-severity incidents and drive root cause remediation—not just containment
• Partner with engineering to embed network security into systems before they ship—not after they fail
• Challenge assumptions, test controls, and eliminate blind spots
• Perform implementations and configuration of network security technologies
• Apply Zero Trust principles to control network access to resources
• Recommend, create, and maintain security configuration baselines to be used to harden systems
• Ensure all systems security operations and maintenance activities are properly documented and updated
• Automate manual tasks for improved efficiencies (eg.. infrastructure as code)
• Support Enterprise Risk with audits and compliance initiatives
• Assist in developing requirements and driving deliverables
• Participate in an on-call rotation as required 

Basic Qualifications:
• 5+ years of experience in a Network Security Engineering role working with enterprise class Firewalls, DDOS/WAF, IPS and ZTNA
• Ability to assess network security architectures, document findings and recommendations based on industry best practices
• Solid understanding of network protocols, including TCP/IP, DNS, DHCP, and routing protocols
• Knowledge of security frameworks including NIST, ISO, CIS, OWASP 10, etc
• Experience with firewall administration, VPN configuration, and network intrusion detection/prevention systems
• Ability to define and review security policies to control access to systems
• Experience with Public Cloud provider infrastructure, system deployments and product release operations (AWS Preferred)
• Hands on experience leveraging AI-driven tools and techniques to enhance network threat detection and automate network security operations

Preferred Qualifications:
• Bachelor’s or Master’s degree in Information Systems, Information Security, or related fields
• Relevant certifications such as CISSP, CISA, CISM, or CCNP Security
• Working knowledge with PowerShell, Ansible, Terraform, RegEx, Chef or Puppet
• Excellent written and verbal communication skills
• Excellent teamwork and collaboration skills
• Results oriented, high energy, self-motivated

Company Overview:
UKG is the Workforce Operating Platform that puts workforce understanding to work. With the world's largest collection of workforce insights, and people-first AI, our ability to reveal unseen ways to build trust, amplify productivity, and empower talent, is unmatched. It's this expertise that equips our customers with the intelligence to solve any challenge in any industry — because great organizations know their workforce is their competitive edge. Learn more at ukg.com.

Equal Opportunity Employer:  
UKG is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, disability, religion, sex, age, national origin, veteran status, genetic information, and other legally protected categories.

View The EEO Know Your Rights poster      
UKG participates in E-Verify. View the E-Verify posters here.  

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability. 

Disability Accommodation in the Application and Interview Process:
For individuals with disabilities that need additional assistance at any point in the application and interview process, please email UKGCareers@ukg.com. 

The pay range for this position is $102,300 to $147,050. The actual base pay offered may vary depending on skills, experience, job-related knowledge and work location. In addition to base pay, employees may be eligible to participate in a performance-based bonus plan and to receive restricted stock unit awards as part of total compensation. Learn more about UKG’s benefits and rewards at https://www.ukg.com/about-us/careers/benefits