# Technical Lead - User Access Review Strategy and Execution

**Company**: Workday
**Location**: Reston, VA
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: full-time
**Salary**: $159,600 USD - $239,400 USD
**Category**: Security
**Industry**: Technology

**Apply**: https://workday.wd5.myworkdayjobs.com/en-US/Workday/job/USAVAReston/Sr-IAM-Cybersecurity-Engineer--Enterprise-Identity_JR-0111070?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_8f51a44c-af0

## Description

We are looking for a Technical Lead to join our Enterprise Identity team, focusing on User Access Review (UAR) strategy and execution.

As technical lead for Workday’s UAR strategy and execution, you’ll run end-to-end access certification programs, eliminate access creep, and keep governance and compliance continuous across IAM, ILM, IGA, and PAM systems.

Responsibilities:

- Design, architect, and run enterprise-wide UAR programs to detect and remediate access creep across cloud and on-prem environments

- Automate certification workflows and review cadences in IGA platforms to cut admin effort and improve accuracy

- Partner with internal and external auditors to align UAR with SOX, SOC2, and ISO 27001, and deliver audit-ready reporting

- Pair Zero Standing Privileges (ZSP) and Just-In-Time (JIT) provisioning with periodic reviews to speed revocation and enforce least privilege

- Apply AI/ML to enable risk-based reviews, automated revocation suggestions, and anomaly detection

- Build identity and security services with AI/ML to automate threat detection and risk-based access decisions

- Work with product owners on secure requirements, security architecture, and contextual authorization

- Evolve security policies and procedures toward modern, least-privilege identity approaches

- Own identity security and governance across departments, influencing stakeholders at every level

- Treat identity solutions as internal products, scaling them for efficiency and adoption

- Balance strong security controls with business agility and a smooth user experience

Requirements:

- Bachelor’s degree or higher in Computer Science, Cybersecurity, Information Security, or a related field

- 7+ years of IT or infosec experience (4+ with an MS)

- Hands-on experience designing, launching, and managing enterprise-scale UAR and access certification campaigns

- Experience with Okta (IAM, Workflows)

- Deep expertise in IGA tooling (Okta Identity Governance, SailPoint, Saviynt) for automated UAR campaigns, entitlement cataloging, and remediation

- Familiarity with identity lifecycle management concepts, including source of truth

- Practical experience with regulatory compliance, audit readiness, and identity gap remediation

## Skills

### Required
- Okta
- IGA
- Identity Governance
- Access Certification
- AI/ML
- Cybersecurity
- Information Security

### Nice to have
- CISSP

---

Source: [Apply at workday.wd5.myworkdayjobs.com](https://workday.wd5.myworkdayjobs.com/en-US/Workday/job/USAVAReston/Sr-IAM-Cybersecurity-Engineer--Enterprise-Identity_JR-0111070?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)