Enterprise Architect (Solutions Engineer), Identity

Workday•Pleasanton, CA

1d•$115,500 - $173,300•Hybrid

About The Position

Workday is expanding into identity management and establishing a specialized Identity team to help enterprise customers modernize identity governance and access management for people and AI agents. The team works across Sales, Product Management, Consulting Services, Marketing, and Value Management to help customers reduce access risk, strengthen compliance, automate identity lifecycle processes, and support trusted AI adoption. The Enterprise Architect serves as a trusted advisor to Workday customers and prospects, shaping identity governance and access management strategies around their business objectives. The role requires expertise in identity and security domains and enterprise SaaS, along with the ability to engage senior technology and security leaders and translate complex identity, access, compliance, lifecycle automation, and AI governance needs into scalable solutions and executive-level value propositions. The position is part of Workday’s Revenue organization. It involves customer-facing technical presales work, solution architecture, demonstrations, workshops, integration planning, and collaboration with internal teams and ecosystem partners. The role includes travel for customer meetings, partner events, or industry conferences. Workday’s Flex Work approach requires spending at least 50% of time each quarter in the office or in the field with customers, prospects, and partners, with flexibility in scheduling.

Requirements

At least 4 years in technical presales, solutions engineering, or an identity architect/engineer role, or equivalent hands-on experience in IAM/IGA/AI, for the Enterprise Architect level.
At least 1 year focused on identity governance, identity and access management, cybersecurity, cloud security, or related solutions, for the Enterprise Architect level.
Foundational understanding of authentication, authorization, identity services such as Okta, Entra AD, LDAP, and Google Workspace, and cloud IAM basics.
Practical knowledge of directory services, including Okta, Entra ID, LDAP, Google Workspace, and on-premises Active Directory.
Hands-on cloud experience with AWS IAM/IAM Identity Center, GCP IAM, and Azure AD or role-based access models, including governance with IGA.
Comfort with Go, APIs, SDKs, JSON/YAML, scripting, automation, and Terraform or similar infrastructure-as-code tools.
Strong communication skills and ability to explain technical concepts to technical and non-technical stakeholders.
Curiosity about identity security and motivation to deepen technical knowledge.
Willingness to travel for customer meetings, partner events, or industry conferences.
Ability and interest in building new things, presenting ideas, and helping customers understand and solve access management challenges.

Nice To Haves

Industry-recognized certifications such as CCSP, CISSP, AWS, Azure, or GCP.
For the Senior Enterprise Architect level: 6+ years in technical presales, solutions engineering, or an identity architect/engineer role (or equivalent hands-on IAM/IGA/AI experience), and 3+ years focused on identity governance, IAM, cybersecurity, cloud security, or related solutions.
For the Principal Enterprise Architect level: 8+ years in technical presales, solutions engineering, or an identity architect/engineer role (or equivalent hands-on IAM/IGA/AI experience), and 5+ years focused on identity governance, IAM, cybersecurity, cloud security, or related solutions.

Responsibilities

Advise prospects and customers on identity governance, authentication, authorization, and access control strategies.
Architect and deliver technical solutions across IGA, IAM, CIEM, and PAM, translating business requirements into scalable identity architectures.
Lead workshops, whiteboard sessions, and demonstrations that communicate the value of identity automation, access governance, and zero trust.
Design integration strategies across AWS, GCP, and Azure, including native identity services, policies, and entitlement models.
Explain identity protocols and standards, including SAML, OAuth 2.0, OIDC, SCIM, and FIDO2, to technical and executive audiences.
Build, test, and troubleshoot custom integrations and workflows using APIs, SDKs, and Terraform or other automation frameworks.
Monitor trends in identity governance, CIEM, Just-in-Time access, Zero Trust, and identity for machine or non-human accounts, and share thought leadership with internal teams and customers.
Build trusted relationships with executive stakeholders and ecosystem partners and help shape complex security- and identity-focused sales cycles.

Benefits

May be eligible for the Workday Bonus Plan or a role-specific commission/bonus.
May be eligible for annual refresh stock grants.
Workday comprehensive benefits are referenced; specific benefits are not listed in the posting.
Flexible scheduling under Workday’s Flex Work approach.

Stand Out From the Crowd

Upload your resume and get instant feedback on how well it matches this job.

Upload and Match Resume