Senior Identity & Access Management Engineer, Workday
€84-126k
More information about location
Enterprise AI platform for managing HR and finance
Be an early applicant
Enterprise AI platform for managing HR and finance
1001+ employees
Be an early applicant
€84-126k
More information about location
1001+ employees
Company mission
To leverage the power of AI to elevate humans and supercharge work, moving business forever forward.
Role
Who you are
- 7+ years of experience in cybersecurity, with at least 5+ years dedicated to IAM engineering and architecture
- Deep, hands-on expertise with enterprise IAM platforms (e.g., Okta, Ping Identity, ForgeRock, Microsoft Entra ID) and PAM tools (e.g., CyberArk, BeyondTrust, Boundary), as well as directory services (LDAP, Active Directory)
- Deep, hands-on expertise managing AWS and GCP environments at scale, including configuring and managing EC2, EKS/GKE, AWS IAM, and GCP Cloud IAM
- Expert-level understanding of protocols such as SAML 2.0, OIDC, OAuth 2.0, SCIM, LDAP, and Kerberos
- Proficient in scripting (GoLang, Python, PowerShell, Bash) and Infrastructure as Code (Terraform) to automate identity workflows
- Bachelor's degree in Computer Science or equivalent. Highly preferred certifications: CISSP, CIAM, CAMS, or provider-specific architect certifications (e.g., Okta Certified Professional/Consultant), AWS Certified Solutions Architect preferred
- Security Engineering: Experience designing and implementing systems, procedures, and protocols to protect information and data from unauthorized access. This includes understanding encryption, authentication, intrusion detection, and the ability to assess potential risks and vulnerabilities across complex environments
- Security by Design: A proactive approach to integrating security measures into the design and architecture of systems from the outset. You understand security principles and controls, risk assessment methodologies, and secure coding practices, and can design systems that resist, tolerate, and recover from security breaches
- Public Clouds: Experience managing and optimizing cloud resources at scale, implementing cloud security measures, and understanding various cloud service models (IaaS, PaaS, SaaS) and cloud architecture
- Information Security: A solid foundation in protecting data from unauthorized access, disclosure, disruption, modification, or destruction, including network security, application security, cryptography, and disaster recovery planning
- Security Platforms: Experience understanding and managing the various technologies and systems designed to protect an organization's digital information and infrastructure, including configuring and operating security software, hardware, and services
- Security Operations: Experience with the identification, analysis, and mitigation of threats to an organization's information assets, including incident response protocols, threat intelligence, and risk management strategies
- Ability to manage multiple projects and priorities while maintaining operational responsibilities
- Excellent written and verbal communication skills, with the ability to build positive relationships across partner organizations
- A sense of ownership and motivation to move with urgency in a fast-paced environment
- If you are energized by meaningful security challenges with real organizational impact, this is the team for you!
What the job involves
- The Enterprise Identity team serves as Workday's first and most critical line of defense
- We own, architect, and evolve the Identity and Access Management (IAM) systems that govern exactly who gets access to internal resources, what they can do with that access, and why
- Operating across one of the most complex enterprise cloud environments in the software industry, our technical scope spans human, non-human, and multi-cloud identity systems
- From designing and implementing practical Zero Trust controls and conditional access policies, to engineering automated workflows for seamless onboarding, role transitions, and offboarding across the company, this team is at the forefront of how Workday secures its digital ecosystem
- We are also pioneering work on the AI and agentic frontier, addressing the emerging challenge of securing autonomous AI agents, non-human identities (NHIs), and service-to-service trust models in production
- Our work in privileged access governance is focused on hardening system access, reducing long-lived elevated privileges, and driving the transition toward right-sized entitlements and least-privilege models
- At Workday, identity is not a back-office IT support function
- It is a core security boundary and engineering enabler
- The Enterprise Identity team directly influences how safely Workday builds and ships products, acting as a crucial pillar in protecting the vital data and infrastructure of over 60 million users
- As a Senior IAM Engineer on the Enterprise Identity team, you will play a central role in modernizing the design, architecture, and evolution of our enterprise identity ecosystem
- You will secure digital identities across cloud, hybrid, and on-premises environments while balancing hands-on engineering with technical mentoring of more junior team members
- You will also oversee the administration of IAM services in our European Sovereign Cloud
- Architecture and Design: Contribute to the design, implementation, and scaling of enterprise IAM solutions, including Single Sign-On (SSO), Multi-Factor Authentication (MFA), Lifecycle Management, and Directory Services
- Cloud Identity: Define and implement IAM strategies across multi-cloud environments (e.g., AWS, Azure, GCP), focusing on CBAC, RBAC, PBAC, and ABAC as part of a Zero Trust and Zero Standing Privileges security model
- Automation and DevSecOps: Champion "Identity as Code" by automating provisioning, de-provisioning, and access review workflows using CI/CD pipelines and scripting
- Mentorship and Leadership: Provide technical mentorship to mid-level and junior engineers, establish engineering best practices, and lead incident response for complex identity-related issues
- Compliance and Audit: Partner with Risk and Compliance teams to ensure identity practices align with frameworks such as SOC2, ISO 27001, and GDPR
- Regional Operations Oversight: Provide SRE oversight of IAM services in the European Sovereign Cloud environment
- AI-Driven Development: Use AI tools and techniques to accelerate development and improve engineering workflows
- Automation at Scale: Identify and implement automation opportunities to streamline IAM operations and reduce manual effort
- AWS IAM Modernization: Contribute to the redesign and modernization of how the team manages IAM in AWS
Our take
Workday is a cloud-based software vendor that provides management of workforces and finances. The company uses a single database for workforce management and financial management to offer integration and optimize business intelligence across companies. It has added to the packages and tools it offers over the years, providing analytic options that allow companies to combine third-party data with information collected by Workday.
The company has also grown through acquisitions and partnerships to broaden its capabilities.. Most recently, in 2025 it purchases Sana, an AI-driven enterprise knowledge and learning platform, to create a "new front door for work". This acquisition allows Workday to integrate Sana's AI-powered search, agents, and learning capabilities with its own data and workflows, allowing employees to access information, automate tasks, and complete their day entirely within Workday.
Through a combination of strategic acquisitions and in-house development, WOrkday has built a comprehensive suite of HR, financial, and enterprise tools. By focusing on innovation and AI-driven workflows, the company continues to push productivity and decision-making for organizations worldwide. Building on this track record, Workday is very much positioned for even more growth, reinforcing its status as a leader in shaping the future of work.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
16% employee growth in 12 months
Company
Funding (last 2 of 5 rounds)
Oct 2011
$85m
SERIES F
Apr 2009
$75m
SERIES E
Total funding: $215.3m
Company HQ
Pleasanton, CA
Leadership
Aneel Bhusri
(Co-Founder & Executive Chair)Annel began his career at Morgan Stanley as a Corporate Finance Analyst. He then spent nearly 6 years at PeopleSoft as a Senior VP before co-founding Workday in 2005, where he has served as the CEO ever since.
Carl Eschenbach
(CEO)Carl joined Workday in 2022 as Co-CEO, becoming CEO in 2024. He has also been a Partner at Sequoia Capital since 2016. Previously, he spent 14 years at VMware as President and COO and 3 years at Inktomi Corporation as the VP of North America Sales.
Peter Bailis
(CTO)Prior to joining Workday in 2025, People was a VP of Engineering at Google. He also previously founded Sisu Data, where he served as the CEO for over 5 years.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 123 more jobs at Workday