Identity Security Engineer, Workday
More information about location
Enterprise management cloud platform
Open for applications
Enterprise management cloud platform
1001+ employees
Open for applications
More information about location
1001+ employees
Company mission
To provide an all-in-one management cloud solution for the rapidly changing business requirements of the modern world.
Role
Who you are
- Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent experience
- Experience in Identity and Access Management (IAM), API security, and security automation within cloud-native and hybrid environments is highly desirable
- Solid understanding of security principles and standard methodologies, with a deep focus on IAM concepts
- Demonstrated knowledge and experience in one or more of the following areas:
- Non-Human Identity Management (e.g. secrets management, API security, application identity management)
- ITDR tools and techniques (e.g., anomaly detection, behavioral analytics)
- Cloud IAM services (e.g., AWS IAM, Azure AD, GCP IAM)
- Authentication and authorization protocols (e.g., OAuth 2.0, SAML, Kerberos)
- Awareness of risks associated with LLM-based applications (e.g., secret leaks, identity impersonation, agent-to-agent chaining vulnerabilities)
- IaC security considerations for identity management
- Familiarity with Zero Trust security principles
- Experience with security tools and technologies relevant to the specialisation (e.g., CI/CD, AWS Secrets Manager, HashiCorp Vault, Azure Key Vault, Okta Workflows, SIEM/SOAR platforms etc.)
- Strong analytical and problem-solving skills, with the ability to investigate and resolve complex security issues related to identity
- Superb communication and collaboration abilities, with the capacity to explain technical concepts to both technical and non-technical audiences
- Ability to work independently, run multiple tasks effectively, and prioritize in a dynamic environment
- Experience with scripting languages (e.g., Python, PowerShell) for automation and analysis
- Relevant security certifications (e.g., CISSP, Security+, CySA+, CEH, AWS/Azure Security certifications, vendor-specific IAM certifications) are a plus, as is any foundational knowledge of identity security principles
- Experience contributing to open-source or internal tools, or publishing content (e.g., blogs, talks, or research) that advance identity security especially in areas like automation, observability, non-human identities (NHIs), or AI-related risks
What the job involves
- You will play a key role in the specialized areas of NHI security and ITP within Workday's evolving cloud environment, with a forward-looking perspective on the security implications of AI and Agentic AI
- Your main focus will be on securing non-human entities, as well as implementing and managing solutions to proactively detect and respond to identity-based threats, including those potentially using or targeting AI agents
- You will be instrumental in strengthening Workday's overall security posture and advancing our zero-trust initiatives in these critical domains
- Designing and implementing security frameworks and tools specifically for NHIs (e.g., service accounts, applications, APIs) within cloud and on-premise environments
- Developing and deploying solutions for identity threat detection and response (ITDR) to proactively identify, analyze, and mitigate malicious activity targeting both human and non-human identities, including novel threats potentially involving AI agents
- Architecting and maintaining secure AuthN (authentication) and AuthZ (authorization) mechanisms for non-human entities, ensuring least privilege and secure access to resources across diverse systems
- Driving initiatives to implement just-in-time (JIT) access and eliminate standing privileges for machine identities, using ephemeral credentials where feasible
- Developing and maintaining comprehensive documentation, including security policies, standards, procedures, and architectural diagrams
- Contributing to the automation of security controls, provisioning processes, and threat response workflows for NHIs, exploring opportunities maximise AI and automation for enhanced security
- Staying up-to-date with the latest threats, vulnerabilities, and standard processes related to NHI security, ITDR, cloud security, and the emerging AI landscape
- Collaborating with multi-functional teams, including Business Technology, Product & Technology, Cyber Defense, and Infrastructure Engineering, to integrate security standard methodologies for non-human identities into applications, infrastructure as code (IaC), and cloud service deployments, as well as on broader related projects and initiatives
- Partnering with Governance, Risk & Compliance and audit team members to ensure identity controls meet regulatory and compliance requirements (e.g., SOX, ISO 27001, NIST)
Our take
Workday is a cloud-based software vendor that provides management of workforces and finances. The company uses a single database for workforce management and financial management to offer integration and optimize business intelligence across companies. It has added to the packages and tools it offers over the years, providing analytic options that allow companies to combine third-party data with information collected by Workday.
Workday has acquired and paired up with many other companies to keep expanding its offering. In 2021, it purchased the employee feedback platform Peakon in response to the growing need for managers to be able to survey workers and collect satisfaction data without face-to-face meetings. The company has also bought and developed many financial tools and HR management tools.
The company’s goal is to provide end-to-end back office services and while there are other providers, such as UKG Pro and Ceridian HCM, Workday’s broad offering helps them to stand out. Though it faced a tough global market in 2023 and has shed some of its headcount, Workday has seen a 6.5% gain in value in the first quarter of 2024. It is now focusing on growth and developing the AI capabilities of its platform. .
Kirsty
Company Specialist at Welcome to the Jungle
Insights
16% employee growth in 12 months
Company
Funding (last 2 of 5 rounds)
Oct 2011
$85m
SERIES F
Apr 2009
$75m
SERIES E
Total funding: $215.3m
Company benefits
- Company equity
- Vision and dental insurance
- Work from home opportunities
- Health insurance
- Virtual primary care
- Flexible time-off policy
- Global mental health resources
- Global dedicated on-site clinical counselors
- Global well-being days
- $25k fertility/family planning benefits
- North Star financial wellness
- Retirement funds and matching
Company HQ
Pleasanton, CA
Leadership
Aneel Bhusri
(CEO)Worked for Morgan Stanley for 3 years and took a Stanford MBA, before spending almost 6 years at Oracle as SVP. Co-founded Workday in 2005 while working as a Greylock Advisory Partner.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 87 more jobs at Workday