Identity & Access Management Engineer, Workday
€70.2-105.4k
More information about location
Enterprise AI platform for managing HR, finance & IT
Open for applications
Enterprise AI platform for managing HR, finance & IT
1001+ employees
Open for applications
€70.2-105.4k
More information about location
1001+ employees
Company mission
To leverage the power of AI to elevate humans and supercharge work, moving business forever forward.
Role
Who you are
- Experience: 3–5 years of experience in IT or Security, with 2+ years of direct experience administering and configuring IAM solutions
- Identity Platforms: Solid experience working with tools like Okta or Microsoft Entra ID, LDAP, Active Directory, Ory Hydra
- Protocols: Practical understanding of authentication and authorization standards (SAML, OAuth, OIDC, and REST APIs)
- Scripting: Competency in at least one scripting language (GoLang or Python preferred) for API integration and data manipulation
- Soft Skills: Strong analytical problem-solving skills and the ability to explain complex technical access issues to non-technical stakeholders
- Certifications: Security+, Okta Certified Administrator, or Microsoft Certified: Identity and Access Administrator Associate are a plus, along with AWS Cloud Practitioner
- Education: Bachelor’s degree in a relevant discipline such as Computer Science, Cybersecurity, Information Security, or a related discipline, or equivalent practical experience
- Good understanding of Information Security principles and best practices, including zero standing privileges
- Proficiency in one or more Programming Languages such as Python used for security automation, analysis, or tool development
- Working knowledge of Public Clouds like AWS/GCP and implementing security measures within those environments
- Understanding of Security by Design principles and the ability to contribute to secure design and conduct security reviews
What the job involves
- The Enterprise Identity team serves as Workday's first and most critical line of defense
- We own, build, and evolve the Identity and Access Management (IAM) systems that govern exactly who gets access to internal resources, what they can do with that access, and why
- Operating across one of the most complex enterprise cloud environments in the software industry, our technical scope spans human, non-human, and multi-cloud identity systems
- From implementing practical Zero Trust controls and conditional access policies, to engineering automated workflows for seamless onboarding, role transitions, and offboarding across the company, this team is at the forefront of how Workday secures its digital ecosystem
- We are also tackling challenges on the AI and agentic frontier, securing autonomous AI agents, non-human identities (NHIs), and service-to-service trust models in production
- Our work in privileged access governance focuses on hardening system access, reducing long-lived elevated privileges, and driving the transition toward right-sized entitlements and least-privilege models
- At Workday, identity is not a back-office IT support function—it is a core security boundary and engineering enabler
- The Enterprise Identity team directly influences how safely Workday builds and ships products, acting as a crucial pillar in protecting the vital data and infrastructure of over 60 million users
- We are looking for a skilled Mid-Level IAM Engineer to join our Enterprise Identity team
- You will be responsible for the day-to-day configuration, maintenance, and optimization of our identity tools
- This role is perfect for a core builder who loves solving technical integration challenges, automating repetitive tasks, and ensuring our employees and systems have the right access at the right time
- System Integration: Configure, integrate, and maintain connections between our core identity provider (IdP) and various SaaS applications, internal systems, and APIs
- Lifecycle Management: Implement and troubleshoot automated user lifecycle workflows (joiner, mover, leaver) to ensure seamless and secure access transitions
- Operational Support: Act as the initial contact point for identity and access issues in EU Sovereign Cloud, resolving tier-one directory synchronization or authentication failures. Perform regular vulnerability management updates across cloud environments
- Directory Management: Administer and maintain LDAP, Ory Hydra, and HR-driven identity data feeds
- Process Automation: Write and maintain scripts to automate routine identity tasks, such as generating access reports or cleaning up orphaned accounts
- Documentation: Create and maintain clear technical documentation, architectural diagrams, and standard operating procedures (SOPs) for the IAM ecosystem
Our take
Workday is a cloud-based software vendor that provides management of workforces and finances. The company uses a single database for workforce management and financial management to offer integration and optimize business intelligence across companies. It has added to the packages and tools it offers over the years, providing analytic options that allow companies to combine third-party data with information collected by Workday.
The company has also grown through acquisitions and partnerships to broaden its capabilities. Most recently, in 2025 it purchases Sana, an AI-driven enterprise knowledge and learning platform, to create a "new front door for work". This acquisition allows Workday to integrate Sana's AI-powered search, agents, and learning capabilities with its own data and workflows, allowing employees to access information, automate tasks, and complete their day entirely within Workday.
Through a combination of strategic acquisitions and in-house development, Workday has built a comprehensive suite of HR, financial, and enterprise tools. By focusing on innovation and AI-driven workflows, the company continues to push productivity and decision-making for organizations worldwide. Building on this track record, Workday is very much positioned for even more growth, reinforcing its status as a leader in shaping the future of work.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
16% employee growth in 12 months
Company
Funding (last 2 of 5 rounds)
Oct 2011
$85m
SERIES F
Apr 2009
$75m
SERIES E
Total funding: $215.3m
Company HQ
Pleasanton, CA
Leadership
Aneel Bhusri
(Co-Founder & CEO)Annel began their career at Morgan Stanley as a Corporate Finance Analyst. They then spent nearly 6 years at PeopleSoft as a Senior VP before co-founding Workday in 2005.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 98 more jobs at Workday