Description
We’re Workday, a Fortune 500 company and a leading AI platform for managing people, money, and agents. We're shaping the future of work so teams can reach their potential and focus on what matters most.
About the Team At Workday Government, we focus on outcomes that serve a larger mission. Our work supports U.S. federal agencies as they modernize and transform the full employee lifecycle experience and finance operations.
About the Role This role will support one or more direct or indirect contracts with the U.S. Federal Government which, due to federal government security requirements, mandates that all Workday personnel working on the contracts be United States citizens (naturalized or native).
As a Senior SRE with VDI expertise, you will ensure our platforms are scalable, secure, and resilient. You will balance traditional SRE automation tasks with the day-to-day operational rigor required to maintain a high-security Windows 365/AVD environment.
Core SRE Responsibilities
- Platform Reliability: Maintain the health and high availability of our Kubernetes-based platform through infrastructure automation and observability.
- Infrastructure as Code: Automate provisioning and configuration management using Terraform and Argo CD.
- On-Call & Incident Response: Participate in a 24/7 rotation, serving as a Tier 2/3 escalation point for both platform and VDI-specific incidents.
- Security & Compliance: Implement industry standard methodologies and maintain STIG compliance across all endpoints and cloud resources.
VDI & Identity Operations
- VDI Management: Lead VDI endpoints using Microsoft Intune and perform monthly patching/security updates for custom golden images.
- VDI Expertise: Experience with Windows 365 or Azure Virtual Desktop (AVD) in a production setting.
- Identity Governance: Manage Microsoft Entra ID (formerly Azure AD) features, including Conditional Access policies, Access Packages, and MFA registration (Passkeys/TAP).
- Security Monitoring: Monitor and respond to alerts from Microsoft Sentinel, Defender for Endpoint, and Defender for Cloud Apps.
- Lifecycle Automation: Troubleshoot automated user provisioning and manage pool-specific access controls to segregate user populations (Engineering vs. Efficiency).
About You This role may require a security clearance at the TS/SCI w/CI Poly level. Applicants must have the ability to obtain and maintain a U.S. government issued security clearance.
Basic Qualifications
- Experience: Minimum of 5 years of experience in SRE, DevOps, or Cloud Operations.
- Environment: At least 3 years of experience operating in high-security environments (DoD IL5, FedRAMP High, or GCC-High).
- Clearance: Ability to obtain and maintain a U.S. Government TS/SCI w/CI Poly. (Active clearance preferred).
- Citizenship: Must be a U.S. Citizen (naturalized or native) per federal contract requirements.
Technical Skills & Other Qualifications
- Cloud & Infrastructure: Proficiency with Terraform and CI/CD tools (Argo CD).
- Microsoft Stack: Deep hands-on expertise with Microsoft Entra ID (Conditional Access, Identity Governance) and Microsoft Intune.
- VDI Expertise: Experience with Windows 365 or Azure Virtual Desktop (AVD) in a production setting.
- Security Tools: Familiarity with Microsoft Sentinel and Defender for Endpoint.
- Documentation: Strong technical writing skills for creating SOPs, architecture diagrams, and reliability practices.
Workday Pay Transparency Statement The annualized base salary ranges for the primary location and any additional locations are listed below. Workday pay ranges vary based on work location.
Primary Location: USA.VA.Reston Primary Location Base Pay Range: $147,400 USD - $221,200 USD