Principal Cloud Iam Engineer

Workday

Reston, VA, USA
Base: $184,800 - $277,200 usd (reston); base: $167...
Fully remote
10+ years cloud security or iam experience
Aws iam foundations scps abac multi-account architecture
Enterprise scale okta sso adaptive mfa scim provisioning
This role serves as the central line of defense for Workday's vital data, infrastructure, and applications through authority and technical solutions

Job Summary

  • This role serves as the central line of defense for Workday's vital data, infrastructure, and applications through authority and technical solutions.
  • The successful candidate will own the strategy and long-term direction of the IAM program, focusing on human and non-human identity in complex cloud environments.
  • Workday offers a flexible work approach requiring at least half of the time each quarter to be spent in-office or with customers, alongside competitive compensation and benefits.

Matching Summary

This role serves as the central line of defense for Workday's vital data, infrastructure, and applications through authority and technical solutions.

Salary

Base: $184,800 - $277,200 USD (Reston); Base: $167,200 - $300,000 USD (Other US locations); Bonus/Equity: Eligible for Workday Bonus Plan and annual refresh stock grants

Skills & Requirements

Must-have

  • 10+ years cloud security or IAM experience
  • AWS IAM foundations SCPs ABAC multi-account architecture
  • Enterprise scale Okta SSO adaptive MFA SCIM provisioning
  • Federation protocols SAML OIDC OAuth2 debugging
  • Terraform Infrastructure-as-code CI/CD integration
  • AI agentic identity NHI lifecycle management
  • Zero Trust identity-aware perimeters conditional access

Nice-to-have

  • GCP familiarity advantageous
  • AI security tooling LLM access governance
  • Risk mitigation mindset with GRC engagement
  • Mentoring less senior engineers
  • Workday Certified Security Specialty

Key Requirements

  • 10+ years experience in cloud security or IAM
  • 3+ years in senior or architect-level role
  • Hands-on engagement with AI and agentic identity
  • Proven ability to drive technical alignment without authority

Work Rights

Not specified

Tailored Resume

Cover Letter