Enterprise Architect, Identity

We are seeking an Enterprise Architect, Identity to serve as a trusted advisor to Workday customers and prospects, crafting the overall identity governance and access management solution strategy to achieve their business objectives.

In this role, you will:

• Serve as a trusted advisor to prospects and customers on identity governance, authentication, authorization, and access control strategies.
• Architect and deliver technical solutions spanning IGA, IAM, CIEM, and PAM, mapping business requirements into scalable identity architectures.
• Lead workshops, whiteboard sessions, and demos that showcase the business value of identity automation, access governance, and zero trust.
• Design and implement integration strategies across AWS, GCP, and Azure, with a strong understanding of native identity services, policies, and entitlement models.
• Nerd out on protocols and standards like SAML, OAuth 2.0, OIDC, SCIM, and FIDO2 , and explain them to both engineers and CISOs.
• Build, test, and troubleshoot custom integrations and workflows using APIs, SDKs, and Terraform/automation frameworks.
• Stay ahead of industry trends (IGA, CIEM, Just-in-Time access, Zero Trust, identity for machine/non-human accounts) and share thought leadership with internal teams and customers.

Basic Qualifications:

• 4+ years in a technical pre-sales, solutions engineering, or identity architect/engineer role, OR equivalent hands-on experience in IAM/IGA/AI.
• 1+ years focused on identity governance, identity and access management, cybersecurity, cloud security, or related solutions.

Other Qualifications:

• Foundational understanding of authentication, authorization, identity services (Okta, Entra AD, LDAP, Google Workspace), and cloud IAM basics.
• Practical knowledge of directory services (Okta, Entra ID, LDAP, Google Workspace, on-prem AD).
• Hands-on cloud experience with AWS IAM/IAM Identity Center, GCP IAM, and Azure AD/role-based access models, including how to govern them with IGA.
• Comfort with GO, APIs, SDKs, JSON/YAML, scripting, and automation, Terraform or similar IaC tools.
• Great communication skills and ability to explain technical concepts to both technical and non-technical stakeholders.
• Curiosity about identity security and drive to deepen technical knowledge over time.
• Willingness to travel for customer meetings, partner events, or industry conferences.
• Industry-recognized certifications (CCSP, CISSP, AWS, Azure, GCP, etc.)

Salary Range: $115,500 USD - $173,300 USD