Principal Cloud Engineer (us Federal)

Workday

Reston, VA, USA
Base: $191,500 - $287,300 usd; bonus/equity: eligi...
Hybrid (50% in-office time required quarterly)
8+ years as a cloud engineer focused on iam
Experience with aws azure entraid or gcp
Proficiency in infrastructure as code using terraform
Workday is seeking a Principal Cloud Engineer with a focus on identity and access management (IAM) for its Government division, specifically to support U.S. federal contracts. The ideal candidate should have extensive experience in cloud engineering, knowledge of IAM protocols, and the ability to work within compliance frameworks. This position offers a flexible work environment, competitive salary, and the opportunity to contribute to meaningful, mission-driven work

Job Summary

  • This role supports U.S. Federal Government contracts requiring personnel to be United States citizens working in an air-gapped classified cloud environment.
  • The position involves automating identity administration and managing permissions across major cloud platforms while ensuring compliance with strict federal security standards.
  • Candidates must possess at least eight years of experience in cloud engineering with a specific focus on Identity and Access Management (IAM) and infrastructure as code.

Matching Summary

Match Score: 85

Workday is seeking a Principal Cloud Engineer with a focus on identity and access management (IAM) for its Government division, specifically to support U.S. federal contracts. The ideal candidate should have extensive experience in cloud engineering, knowledge of IAM protocols, and the ability to work within compliance frameworks. This position offers a flexible work environment, competitive salary, and the opportunity to contribute to meaningful, mission-driven work.

Salary

Base: $191,500 - $287,300 USD; Bonus/Equity: Eligible for Workday Bonus Plan and annual refresh stock grants; Benefits: Comprehensive benefits package including flexible work arrangements

Skills & Requirements

Must-have

  • 8+ years as a cloud engineer focused on IAM
  • Experience with AWS Azure EntraID or GCP
  • Proficiency in infrastructure as code using Terraform
  • Knowledge of OAuth OIDC SAML and SCIM protocols
  • Ability to obtain TS/SCI w/CI Poly security clearance

Nice-to-have

  • Familiarity with NIST 800-53 and DoD control frameworks
  • Experience with SEIM tools like Splunk for log analysis
  • Understanding of user lifecycle management workflows
  • Collaboration skills in high-stakes federal environments

Key Requirements

  • United States citizenship (naturalized or native)
  • Active TS/SCI w/CI Poly security clearance preferred
  • Bachelor's degree in computer science or cybersecurity
  • 8+ years of cloud engineering experience
  • Experience with Python automation and CI/CD pipelines

Work Rights

Must have US citizenship (naturalized or native)

Tailored Resume

Cover Letter