Principal Cloud Engineer (us Federal)

Workday

Reston, VA, USA
Primary location base pyy range: $191,500 usd - $2...
On-site (with flexibility for remote work, requiring at least 50% time in the office or customer locations)
Aws, azure/entraid or gcp cloud environments
Automate identity administration
Infrastructure as code with github and terraform
Workday is seeking a Principal Cloud Engineer to support U.S. federal agencies in modernizing their employee lifecycle and finance operations. The ideal candidate will have extensive experience in cloud engineering, particularly in identity and access management (IAM), with a strong emphasis on automation and compliance

Job Summary

  • Workday Government focuses on outcomes that serve a larger mission, supporting U.S. federal agencies in modernizing employee lifecycle and finance operations.
  • This role involves expanding into the US Government air-gapped classified cloud environment, focusing on managing entitlements and permissions.
  • The company offers a culture grounded in integrity, respect, and shared responsibility, with opportunities for growth and investment in people and the federal mission.

Matching Summary

Match Score: 85

Workday is seeking a Principal Cloud Engineer to support U.S. federal agencies in modernizing their employee lifecycle and finance operations. The ideal candidate will have extensive experience in cloud engineering, particularly in identity and access management (IAM), with a strong emphasis on automation and compliance.

Salary

Primary Location Base Pay Range: $191,500 USD - $287,300 USD; Additional US Location(s) Base Pay Range: $173,300 USD - $309,600 USD; Bonus/Equity: Role may be eligible for bonus plan or commission/bonus, and annual refresh stock grants.

Skills & Requirements

Must-have

  • AWS, Azure/EntraID or GCP cloud environments
  • Automate identity administration
  • Infrastructure as code with Github and Terraform
  • Python for automation development
  • Integrate cloud platforms with Okta or EntraID
  • Utilize SEIM tools for log analysis

Nice-to-have

  • Curious minds and courageous collaborators
  • Integrity, empathy, and shared enthusiasm
  • Sun-drenched optimism and drive
  • Bold ideas and genuine care
  • Long-term thinking and rigor

Key Requirements

  • 8+ years as a cloud engineer focused on IAM
  • Experience centralizing authentication/authorization and RBAC/PBAC
  • Familiarity with NIST 800-53 and DoD/Intel control frameworks
  • Bachelor's degree or comparable experience
  • Ability to obtain and maintain TS/SCI w/CI Poly security clearance

Work Rights

Must be a United States citizen

Tailored Resume

Cover Letter