Enterprise Architect (Solutions Engineer), Identity

Workday • Pleasanton, CA

1d • Hybrid

About The Position

Workday is expanding into identity management to help enterprises govern access for employees and AI agents. The role is part of a specialized Identity presales team that presents Workday’s identity governance capabilities to prospects and customers and works across Sales, Product Management, Consulting Services, Marketing, and Value Management. The team helps customers reduce access risk, strengthen compliance, automate identity lifecycle processes, and support trusted AI adoption.

As a trusted advisor to customers and prospects, the Enterprise Architect develops identity governance and access management solution strategies aligned with business objectives. The role engages senior technology and security leaders, translating complex identity, provisioning, access review, least-privilege, lifecycle automation, compliance, and AI governance requirements into scalable architectures and executive-level value propositions. The position also involves leading customer-facing technical sessions, developing and troubleshooting integrations, and sharing expertise on evolving identity and security trends.

The role is based in a flexible-work environment. Employees spend at least half of their time each quarter in an office or in the field with customers, prospects, and partners; remote home-office roles may also come together in offices for important events. Travel is required for customer meetings, partner events, or industry conferences.

Requirements

• For Enterprise Architect: 4 or more years in technical presales, solutions engineering, or an identity architect/engineer role, or equivalent hands-on IAM/IGA/AI experience.
• For Enterprise Architect: 1 or more years focused on identity governance, identity and access management, cybersecurity, cloud security, or related solutions.
• Foundational understanding of authentication, authorization, identity services such as Okta, Entra AD, LDAP, and Google Workspace, and cloud IAM basics.
• Practical knowledge of directory services, including Okta, Entra ID, LDAP, Google Workspace, and on-premises Active Directory.
• Hands-on cloud experience with AWS IAM/IAM Identity Center, GCP IAM, and Azure AD or role-based access models, including how to govern them with IGA.
• Comfort with Go, APIs, SDKs, JSON/YAML, scripting, automation, and Terraform or similar infrastructure-as-code tools.
• Strong communication skills and ability to explain technical concepts to technical and non-technical stakeholders.
• Curiosity about identity security and motivation to deepen technical knowledge.
• Willingness to travel for customer meetings, partner events, or industry conferences.
• Enjoys building new things, presenting ideas, and helping customers understand and solve access management challenges.

Nice To Haves

• Industry-recognized certifications such as CCSP, CISSP, AWS, Azure, or GCP certifications.
• Senior Enterprise Architect qualification: 6 or more years in technical presales, solutions engineering, or identity architecture/engineering, or equivalent hands-on IAM/IGA/AI experience, and 3 or more years focused on identity governance, IAM, cybersecurity, cloud security, or related solutions.
• Principal Enterprise Architect qualification: 8 or more years in technical presales, solutions engineering, or identity architecture/engineering, or equivalent hands-on IAM/IGA/AI experience, and 5 or more years focused on identity governance, IAM, cybersecurity, cloud security, or related solutions.

Responsibilities

• Advise prospects and customers on identity governance, authentication, authorization, and access control strategies.
• Architect and deliver technical solutions across IGA, IAM, CIEM, and PAM, translating business requirements into scalable identity architectures.
• Lead workshops, whiteboard sessions, and demonstrations that communicate the business value of identity automation, access governance, and zero trust.
• Design integration strategies across AWS, GCP, and Azure, applying knowledge of native identity services, policies, and entitlement models.
• Explain identity protocols and standards, including SAML, OAuth 2.0, OIDC, SCIM, and FIDO2, to technical and executive audiences.
• Build, test, and troubleshoot custom integrations and workflows using APIs, SDKs, and Terraform or other automation frameworks.
• Monitor trends in IGA, CIEM, Just-in-Time access, Zero Trust, and identity for machine or non-human accounts, and share thought leadership with internal teams and customers.

Benefits

• May be eligible for the Workday Bonus Plan or a role-specific commission/bonus.
• May be eligible for annual refresh stock grants.
• Flexible work arrangements, including time in offices or with customers, prospects, and partners.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed