# Enterprise Architect, Identity

**Company**: Workday
**Location**: New York City, NY
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: full-time
**Salary**: $115,500 USD - $173,300 USD
**Category**: Engineering
**Industry**: Technology

**Apply**: https://workday.wd5.myworkdayjobs.com/en-US/Workday/job/USA-NY-New-York-City/Enterprise-Architect--Solutions-Engineer---Identity_JR-0111619?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/job/enterprise-architect-identity-7e10d84b-1c3/

## Description

We’re Workday, a leading AI platform for managing people, money, and agents. We're shaping the future of work so teams can reach their potential and focus on what matters most.

**About the Team** Workday is strategically expanding into the identity management space to govern access for both employees and AI agents across the enterprise. As a member of our diverse and skilled Identity presales team, you will have the opportunity to communicate and demonstrate the power of Workday's identity governance capabilities to prospects and customers.

**About the Role** In this role, you will serve as a trusted advisor to Workday customers and prospects, crafting the overall identity governance and access management solution strategy to achieve their business objectives.

**What you’ll do:**

- Serve as a trusted advisor to prospects and customers on identity governance, authentication, authorization, and access control strategies.

- Architect and deliver technical solutions spanning IGA, IAM, CIEM, and PAM, mapping business requirements into scalable identity architectures.

- Lead workshops, whiteboard sessions, and demos that showcase the business value of identity automation, access governance, and zero trust.

- Design and implement integration strategies across AWS, GCP, and Azure, with a strong understanding of native identity services, policies, and entitlement models.

- Nerd out on protocols and standards like SAML, OAuth 2.0, OIDC, SCIM, and FIDO2 , and explain them to both engineers and CISOs.

- Build, test, and troubleshoot custom integrations and workflows using APIs, SDKs, and Terraform/automation frameworks.

- Stay ahead of industry trends (IGA, CIEM, Just-in-Time access, Zero Trust, identity for machine/non-human accounts) and share thought leadership with internal teams and customers.

**Basic Qualifications**

- 4+ years in a technical pre-sales, solutions engineering, or identity architect/engineer role, OR equivalent hands-on experience in IAM/IGA/AI.

- 1+ years focused on identity governance, identity and access management, cybersecurity, cloud security, or related solutions.

**Other Qualifications**

- Foundational understanding of authentication, authorization, identity services (Okta, Entra AD, LDAP, Google Workspace), and cloud IAM basics.

- Practical knowledge of directory services (Okta, Entra ID, LDAP, Google Workspace, on-prem AD).

- Hands-on cloud experience with AWS IAM/IAM Identity Center, GCP IAM, and Azure AD/role-based access models, including how to govern them with IGA.

- Comfort with GO, APIs, SDKs, JSON/YAML, scripting, and automation, Terraform or similar IaC tools.

- Great communication skills and ability to explain technical concepts to both technical and non-technical stakeholders.

- Curiosity about identity security and drive to deepen technical knowledge over time.

- Willingness to travel for customer meetings, partner events, or industry conferences.

- Industry-recognized certifications (CCSP, CISSP, AWS, Azure, GCP, etc.).

**Travel is a required element of this role. The position requires up to 25% travel monthly.**

**Workday Pay Transparency Statement** The annualized base salary ranges for the primary location and any additional locations are listed below. Workday pay ranges vary based on work location. As a part of the total compensation package, this role may be eligible for the Workday Bonus Plan or a role-specific commission/bonus, as well as annual refresh stock grants.

Primary Location: USA.NY.New York City Additional US Location(s) Base Pay Range: $115,500 USD - $173,300 USD

For more fresh new jobs, check out [yubhub.co](https://yubhub.co/).

## Skills

### Required
- identity governance
- access management
- cloud security
- IAM
- IGA
- CIEM
- PAM
- SAML
- OAuth 2.0
- OIDC
- SCIM
- FIDO2
- Terraform
- APIs
- SDKs
- JSON/YAML
- scripting
- automation

### Nice to have
- GO
- AWS IAM
- GCP IAM
- Azure AD
- Okta
- Entra ID
- LDAP
- Google Workspace

---

Source: [Apply at workday.wd5.myworkdayjobs.com](https://workday.wd5.myworkdayjobs.com/en-US/Workday/job/USA-NY-New-York-City/Enterprise-Architect--Solutions-Engineer---Identity_JR-0111619?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)