Infrastructure and Cloud Security Architect

Workday; Norway; Hybrid; NOK 1,585,000 - 2,377,000; Full time

Job summary

Workday is seeking an experienced Infrastructure and Cloud Security Architect based in Pleasanton to define and drive security standards for our platforms. You will partner with Enterprise Security, Infrastructure, and Application teams to ensure security by design across cloud, datacenter, and network domains.

The role requires hands-on security leadership, threat modeling, and cloud-native architecture experience, with a focus on scalable, compliant systems and threat mitigation across the

Qualifications

• Minimum 10+ years of technology proven experience in infrastructure and security solutions.
• Hands-on experience designing and building scalable and resilient cloud applications (AWS, GCP, Azure).
• Experience with security architecture, database architecture, virtualization, software design and development.
• Build reports and dashboards for driving security outcomes.
• Experience with CI/CD pipeline for automated security testing.
• Hands-on experience in AWS Networking Firewall and Security modules.
• Extensive knowledge of infrastructure as code (Terraform CDK CloudFormation).
• Consulting and leadership experience interacting with senior and executive leaders.
• Familiarity with the principles of threat trends and defense in depth.
• Ability to use the principles and practices of project management.
• Passion for new technologies and cloud trends.
• Degree in Computer Science or comparable technical degree; CISSP preferred.

Responsibilities

• Define and maintain standards aligned to ensure NIST and CIS compliance.
• Engage in system design engineering and maintenance to provide technical security guidance across infra programs and initiatives.
• Develop and maintain security context in reference architecture and its prototypes.
• Identify and mitigate security issues misconfigurations and vulnerabilities related to cloud and corporate infrastructure and applications.
• Partner with security engineering observability and vulnerability management to define logging alerting patching backup and recovery capabilities and detect prioritize remediate issues and threats across infrastructure assets.
• Participate in threat modeling security incident response lead incidents and perform post-incident reviews with engineering teams.
• Develop evangelize and monitor the adoption of best cloud security practices.
• Participate in tabletop and security preparedness exercises.
• Build positive relationships with peers across the company to evangelize a strong security culture.
• Partner with Enterprise Architecture and Security to recommend and guide investments to realize best in class security posture.

Skills

Cloud security

AWS

GCP

Azure

Security architecture

Threat modeling

CI/CD security testing

Linux

Networking

Python

Terraform

CDK

Education

Degree in Computer Science or related field

Tools

Terraform

CDK

CloudFormation

Job description

Infrastructure and Cloud Security Architect

Your work days are brighter here.

At Workday it all began with a conversation over breakfast. When our founders met at a sunny California diner they came up with an idea to revolutionize the enterprise software market. And when we began to rise one thing that really set us apart was our culture. A culture which was driven by our value of putting our people first. And ever since the happiness development and contribution of every Workmate is central to who we are. Our Workmates believe a healthy employee-centric collaborative culture is the essential mix of ingredients for success in business. That’s why we look after our people communities and the planet while still being profitable. Feel encouraged to shine however that manifests: you don’t need to hide who you are. You can feel the energy and the passion it's what makes us unique. Inspired to make a brighter work day for all and transform with us to the next stage of our growth journey? Bring your brightest version of you and have a brighter work day here.

About the Team

Working as part of the Infrastructure team within Workday’s Business Technology organization you are responsible for the overall security strategy for the platforms and initiatives within this Org. You will partner with Enterprise Security Application teams and across the infrastructure teams to define security standards and best practices. You will partner with Infrastructure leads to set prioritization and ensure adoption of these standards across different teams and guide technical solutions. The right candidate for this role is a Security Champion who has experience across Network Datacenter infrastructure cloud application security and familiar with threat modeling CIS NIST Standards and is able to influence and ensure its realization through direct and indirect influence.

Contributions to the security community such as open source tools research papers conference talks etc. are a plus!

About the Role

• Define and maintain standards aligned to ensure NIST and CIS compliance.
• Engage in system design engineering and maintenance to provide technical security guidance across infra programs and initiatives.
• Develop and maintain security context in reference architecture and its prototypes.
• Identify and mitigate security issues misconfigurations and vulnerabilities related to cloud and corporate infrastructure and applications.
• Partner with security engineering observability and vulnerability management to define logging alerting patching backup and recovery capabilities and detect prioritize remediate issues and threats across infrastructure assets.
• Participate in thread modeling security incident response lead incidents and perform post-incident reviews with engineering teams.
• Develop evangelize and monitor the adoption of best cloud security practices.
• Participate in tabletop and security preparedness exercises.
• Build positive relationships with peers across the company to evangelize a strong security culture.
• Partner with Enterprise Architecture and Security to recommend and guide investments to realize best in class security posture.

About You

Minimum 10+ years of technology proven experience in infrastructure and security solutions.

• Hands‑on experience designing and building scalable and resilient applications in the cloud (AWS GCP Azure) AWS Preferred.
• Experience with technical and security architecture database architecture virtualization software design development IP Networking Linux Agile Scrum java python integration collaboration technologies.
• Build reports and dashboards for driving security outcomes.
• Experience with CI/CD pipeline for automated security testing.
• Hands‑on experience in AWS Networking Firewall and Security modules.
• Experience delivering software using engineering standard methodologies and principles.
• Extensive knowledge of infrastructure as code (Terraform CFT CDK etc.).
• Consulting and leadership experience interacting with senior and executive leaders across business and technology.
• Familiarity with the principles of network and endpoint security current threat and attack trends and have a working knowledge of security principles such as defense in depth.
• Ability to use the principles and practices of project management.
• Passion for new technologies and cloud trends.
• Degree in Computer science or comparable technical degree. Preferred CISSP and security certifications.

Workday Pay Transparency Statement

The annualized base salary ranges for the primary location and any additional locations are listed below. Workday pay ranges vary based on work location. As a part of the total compensation package this role may be eligible for the Workday Bonus Plan or a role-specific commission/bonus as well as annual refresh stock grants. Recruiter can share more detail during the hiring process. Each candidate’s compensation offer will be based on multiple factors including but not limited to geography experience skills job duties and business need among other things.

Primary Location

USA.CA.Pleasanton

Primary Location Base Pay Range: $164700 USD - $247000 USD

Additional US Location(s)

Base Pay Range: $ USD - $247000 USD

Our Approach to Flexible Work

With Flex Work we’re combining the best of both worlds: in-person time and remote. Our approach enables our teams to deepen connections maintain a strong community and do their best work. We know that flexibility can take shape in many ways so rather than a number of required days in-office each week we simply spend at least half (50%) of our time each quarter in the office or in the field with our customers prospects and partners (depending on role). This means you'll have the freedom to create a flexible schedule that caters to your business team and personal needs while being intentional to make the most of time spent together. Those in our remote 'home office' roles also have the opportunity to come together in our offices for important moments that matter.

Fair Chance Law

Pursuant to applicable Fair Chance law Workday will consider for employment qualified applicants with arrest and conviction records.

Equal Opportunity Employer

Workday is an Equal Opportunity Employer including individuals with disabilities and protected veterans.

Are you being referred to one of our roles? If so ask your connection at Workday about our Employee Referral process!