Description
We are looking for a Technical Lead to join our Enterprise Identity team, focusing on User Access Review (UAR) strategy and execution.
As technical lead for Workday’s UAR strategy and execution, you’ll run end-to-end access certification programs, eliminate access creep, and keep governance and compliance continuous across IAM, ILM, IGA, and PAM systems.
Responsibilities:
- Design, architect, and run enterprise-wide UAR programs to detect and remediate access creep across cloud and on-prem environments
- Automate certification workflows and review cadences in IGA platforms to cut admin effort and improve accuracy
- Partner with internal and external auditors to align UAR with SOX, SOC2, and ISO 27001, and deliver audit-ready reporting
- Pair Zero Standing Privileges (ZSP) and Just-In-Time (JIT) provisioning with periodic reviews to speed revocation and enforce least privilege
- Apply AI/ML to enable risk-based reviews, automated revocation suggestions, and anomaly detection
- Build identity and security services with AI/ML to automate threat detection and risk-based access decisions
- Work with product owners on secure requirements, security architecture, and contextual authorization
- Evolve security policies and procedures toward modern, least-privilege identity approaches
- Own identity security and governance across departments, influencing stakeholders at every level
- Treat identity solutions as internal products, scaling them for efficiency and adoption
- Balance strong security controls with business agility and a smooth user experience
Requirements:
- Bachelor’s degree or higher in Computer Science, Cybersecurity, Information Security, or a related field
- 7+ years of IT or infosec experience (4+ with an MS)
- Hands-on experience designing, launching, and managing enterprise-scale UAR and access certification campaigns
- Experience with Okta (IAM, Workflows)
- Deep expertise in IGA tooling (Okta Identity Governance, SailPoint, Saviynt) for automated UAR campaigns, entitlement cataloging, and remediation
- Familiarity with identity lifecycle management concepts, including source of truth
- Practical experience with regulatory compliance, audit readiness, and identity gap remediation