Sr. IAM Cybersecurity Engineer, Enterprise Identity

Workday • Reston, GA

9d • Hybrid

About The Position

The Sr. IAM Cybersecurity Engineer will serve as technical lead for Workday’s User Access Review (UAR) strategy and execution. The role owns end-to-end access certification programs, helps eliminate access creep, and maintains continuous governance and compliance across identity and access management (IAM), identity lifecycle management (ILM), identity governance and administration (IGA), and privileged access management (PAM) systems.

The engineer will design and operate enterprise-wide UAR programs across cloud and on-premises environments, automate certification workflows, and partner with auditors to ensure alignment with SOX, SOC 2, and ISO 27001. The role combines periodic reviews with Zero Standing Privileges and Just-In-Time provisioning, and applies AI/ML to support risk-based reviews, threat detection, anomaly detection, and access decisions.

The position also works with product owners on secure requirements, security architecture, and contextual authorization; evolves policies and procedures toward least-privilege identity practices; and influences stakeholders across departments. Identity solutions are treated as internal products, with emphasis on scaling adoption and efficiency while balancing security controls, business agility, and user experience.

The role’s three core UAR pillars are strategy and governance, including risk-scaled certification cycles and automated revocation; automation and intelligence, including IGA tooling, peer-group analysis, and usage signals; and compliance and audit readiness, including standardized audit trails, evidence collection, and traceability of review decisions and access changes.

Requirements

• Bachelor’s degree or higher in Computer Science, Cybersecurity, Information Security, or a related field.
• At least 7 years of IT or information security experience, or at least 4 years with a master’s degree.
• Hands-on experience designing, launching, and managing enterprise-scale UAR and access certification campaigns.
• Experience with Okta IAM and Workflows.
• Deep expertise in IGA tools such as Okta Identity Governance, SailPoint, or Saviynt for automated UAR campaigns, entitlement cataloging, and remediation.
• Familiarity with identity lifecycle management concepts, including source of truth.
• Practical experience with regulatory compliance, audit readiness, and identity gap remediation.
• Ability to orchestrate complex certifications across heterogeneous systems, map entitlements, and enforce regulatory controls.
• Product mindset focused on user experience, reduced friction, and measurable adoption alongside security.
• Sound risk-based judgment in ambiguous environments, balancing security and operational needs.
• Strong communication skills, including the ability to communicate from engineers to the C-suite and translate identity risk into business impact.
• Experience building secure systems and applying AI/ML to risk scoring and access control.
• Experience assessing and mitigating weaknesses in identity infrastructure and staying current on threats.
• Core knowledge of Zero Trust, identity management principles, MFA, SSO, SAML, OIDC, and LDAP.

Nice To Haves

• CISSP or equivalent.

Responsibilities

• Design, architect, and operate enterprise-wide User Access Review programs to identify and remediate access creep across cloud and on-premises environments.
• Automate certification workflows and review cadences in IGA platforms to reduce administrative effort and improve accuracy.
• Partner with internal and external auditors to align UAR programs with SOX, SOC 2, and ISO 27001 and provide audit-ready reporting.
• Pair Zero Standing Privileges and Just-In-Time provisioning with periodic reviews to speed access revocation and enforce least privilege.
• Apply AI/ML to risk-based reviews, automated revocation suggestions, anomaly detection, threat detection, and risk-based access decisions.
• Build identity and security services that automate threat detection and risk-based access decisions.
• Work with product owners on secure requirements, security architecture, and contextual authorization.
• Evolve security policies and procedures toward modern, least-privilege identity approaches.
• Own identity security and governance across departments and influence stakeholders at every level.
• Treat identity solutions as internal products and scale them for efficiency and adoption.
• Balance strong security controls with business agility and a smooth user experience.
• Build certification cycles scaled to system criticality and risk, with clear entitlement ownership, definition catalogs, and automated revocation workflows.
• Use IGA platforms and AI/ML to reduce reviewer fatigue through peer-group analysis, usage signals, and automated revocation of inactive entitlements.
• Standardize audit trails, evidence collection, and reporting for SOX, SOC 2, and ISO 27001, ensuring traceability of review decisions and access changes.

Benefits

• May be eligible for the Workday Bonus Plan or a role-specific commission/bonus.
• May be eligible for annual refresh stock grants.
• Comprehensive benefits are referenced, but specific benefits are not listed in the posting.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior