Description
Workday Government is seeking a Cloud Engineer with a focus on Identity and Access Management (IAM) to support our expansion into the US Government air-gapped classified cloud environment.
As a Cloud Engineer, you will work on automating identity administration, authentication, and authorization to resources in the air-gapped network. You will be part of a team that values collaboration, follow-through, and doing the right thing, especially when the stakes are high.
Responsibilities:
- Manage entitlements and permissions in a cloud services environment (AWS, Azure/EntraID, or GCP)
- Automate identity administration, authentication, and authorization using CI/CD pipelines
- Understand infrastructure and compliance as code
- Familiarity with standard federation protocols used in IAM, including OAUTH, OIDC, SAML, and SCIM
- Experience with centralizing authentication/authorization and RBAC/PBAC
- Managing infrastructure as code using tools like Github and Terraform
- Experience developing tools for automation in Python or other programming languages
- Experience integrating cloud platforms with external tools like Okta, EntraID, or similar for centralized authentication and SSO
- Experience in utilizing one or more SEIM tools (Splunk or similar) for log aggregation and analysis, threat playbooks, and auditing
Requirements:
- 8+ years of experience as a cloud engineer, focused on IAM
- US Citizenship is required
- This role may require a security clearance at the TS/SCI w/CI Poly level
- Preferred DoD 8570/8140 compliant with at least IAT Level II certification
- Familiarity with NIST 800-53 and DoD/Intel control frameworks
- Bachelor's degree or higher in computer science, cybersecurity, or comparable work/educational experience
- Familiarity with identity governance workflows, user lifecycle management (joiners, movers, leavers)
Benefits:
- Annualized base salary range: $191,500 - $287,300 USD (primary location) and $173,300 - $309,600 USD (additional US locations)
- Eligibility for Workday Bonus Plan or role-specific commission/bonus
- Annual refresh stock grants
- Comprehensive benefits package
- Flexible work arrangements, with at least 50% of time spent in the office or in the field each quarter