# Cloud Engineer - Identity and Access Management

**Company**: Workday
**Location**: Reston, VA
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: full-time
**Salary**: $191,500 - $287,300
**Category**: Engineering
**Industry**: Technology

**Apply**: https://workday.wd5.myworkdayjobs.com/en-US/Workday/job/USAVAReston/Principal-Cloud-Engineer--US-Federal-_JR-0104997?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_a674fdd0-4f4

## Description

Workday Government is seeking a Cloud Engineer with a focus on Identity and Access Management (IAM) to support our expansion into the US Government air-gapped classified cloud environment.

As a Cloud Engineer, you will work on automating identity administration, authentication, and authorization to resources in the air-gapped network. You will be part of a team that values collaboration, follow-through, and doing the right thing, especially when the stakes are high.

Responsibilities:

- Manage entitlements and permissions in a cloud services environment (AWS, Azure/EntraID, or GCP)

- Automate identity administration, authentication, and authorization using CI/CD pipelines

- Understand infrastructure and compliance as code

- Familiarity with standard federation protocols used in IAM, including OAUTH, OIDC, SAML, and SCIM

- Experience with centralizing authentication/authorization and RBAC/PBAC

- Managing infrastructure as code using tools like Github and Terraform

- Experience developing tools for automation in Python or other programming languages

- Experience integrating cloud platforms with external tools like Okta, EntraID, or similar for centralized authentication and SSO

- Experience in utilizing one or more SEIM tools (Splunk or similar) for log aggregation and analysis, threat playbooks, and auditing

Requirements:

- 8+ years of experience as a cloud engineer, focused on IAM

- US Citizenship is required

- This role may require a security clearance at the TS/SCI w/CI Poly level

- Preferred DoD 8570/8140 compliant with at least IAT Level II certification

- Familiarity with NIST 800-53 and DoD/Intel control frameworks

- Bachelor's degree or higher in computer science, cybersecurity, or comparable work/educational experience

- Familiarity with identity governance workflows, user lifecycle management (joiners, movers, leavers)

Benefits:

- Annualized base salary range: $191,500 - $287,300 USD (primary location) and $173,300 - $309,600 USD (additional US locations)

- Eligibility for Workday Bonus Plan or role-specific commission/bonus

- Annual refresh stock grants

- Comprehensive benefits package

- Flexible work arrangements, with at least 50% of time spent in the office or in the field each quarter

## Skills

### Required
- IAM
- cloud engineering
- automation
- Python
- Github
- Terraform
- OAUTH
- OIDC
- SAML
- SCIM
- SEIM

### Nice to have
- DoD 8570/8140
- IAT Level II
- NIST 800-53
- identity governance workflows

---

Source: [Apply at workday.wd5.myworkdayjobs.com](https://workday.wd5.myworkdayjobs.com/en-US/Workday/job/USAVAReston/Principal-Cloud-Engineer--US-Federal-_JR-0104997?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)