Description
We’re Workday, a Fortune 500 company and a leading AI platform for managing people, money, and agents. We're looking for a highly motivated Software Development Engineer with DevOps experience to join our 24/7 operations team.
About the Role This role will support one or more direct or indirect contracts with the U.S. Federal Government which, due to federal government security requirements, mandates that all Workday personnel working on the contracts be United States citizens (naturalized or native).
Responsibilities
Identity & Access Management (IAM)
- Coordinate and manage Microsoft Entra ID Governance features, including Access Packages and Microsoft 365 Groups, to govern user access lifecycle.
- Monitor and troubleshoot automated Workday → Microsoft Entra ID user provisioning.
- Support user onboarding, including issuing Temporary Access Passes (TAP) and assisting with MFA registration (Passkeys, Microsoft Authenticator).
VDI Operations & Maintenance
- Perform monthly patching and security updates for Windows 365 custom golden images.
- Lead VDI endpoints using Microsoft Intune (compliance, configuration, baselines).
- Provide Tier 2/3 technical support for VDI-related issues.
- Maintain operational health of VDI pools.
Security Operations & Compliance
- Serve as a key member of the 24/7 incident response team, monitoring alerts from: Microsoft Sentinel, Microsoft Defender for Endpoint, and Microsoft Defender for Cloud Apps.
- Maintain continuous STIG compliance for all VDI endpoints.
- Apply security updates to golden images and monitor for deviations using Azure Policy.
- Participate in Eviction protocols, including rapid rotation of all credentials, keys, and secrets.
- Manage pool-specific access controls to segregate user populations (Engineering vs. Efficiency).
- Manage, review, and fine-tune all Microsoft Entra Conditional Access policies.
- Implement policies for: US-only access, VPN-only connections from named locations and device compliance integration with Intune.
Requirements
- Minimum of 3 years of experience operating systems in high-security supervised environments (DoD IL4/IL5, FedRAMP High, GCC-High).
- This role may require a security clearance at the TS/SCI w/CI Poly level. Applicants must have the ability to obtain and maintain a U.S. government issued security clearance. An active TS/SCI w/CI Poly is preferred.
Benefits
- Annualized base salary ranges: $137,000 USD - $205,400 USD (Primary Location), $123,900 USD - $222,000 USD (Additional US Locations)
- Eligible for Workday Bonus Plan or role-specific commission/bonus, as well as annual refresh stock grants
- Comprehensive benefits package
Flexible Work
- With Flex Work, we're combining the best of both worlds: in-person time and remote. Our approach enables our teams to deepen connections, maintain a strong community, and do their best work.