Infrastructure and Cloud Security Architect

Workday; Norge (OK); Hybrid; USD 165,000 - 247,000; Full time

Benefits offered by this job

Workday Bonus Plan

Annual stock grants

Flexible work options

Job summary

Workday seeks an Infrastructure and Cloud Security Architect to lead the security strategy for our cloud platforms. You will partner with infrastructure and enterprise security teams to set standards, drive adoption, and shape secure architectural patterns across AWS, GCP, and Azure.

The right candidate has 10+ years of infrastructure security experience, strong threat modeling, and hands-on IaC expertise (Terraform, CDK, CloudFormation). A CISSP or similar certification is preferred.

Qualifications

• 10+ years in infrastructure and security architecture.
• Experience designing scalable cloud security solutions on AWS/GCP/Azure.
• Familiar with threat modeling and CIS/NIST standards.
• IaC tooling: Terraform, CDK, CloudFormation.
• Experience leading security initiatives and communicating with senior leaders.
• Degree in Computer Science or related field; CISSP preferred.

Responsibilities

• Define and maintain standards aligned to NIST and CIS compliance.
• Guide security across infra programs and initiatives.
• Develop security context within reference architectures.
• Identify and mitigate cloud and on-prem vulnerabilities.
• Collaborate on logging, alerting, patching, and recovery capabilities.
• Lead incident response and post-incident reviews with engineering teams.
• Promote best cloud security practices across teams.
• Engage with Enterprise Architecture to guide security investments.

Skills

10+ years experience

Cloud security architecture

AWS/GCP/Azure

Threat modeling

NIST/CIS standards

IaC (Terraform, CDK, CloudFormation)

Security incident response

Security automation / CI/CD security

Leadership / stakeholder engagement

Linux

Python/Java

Education

Computer Science degree

CISSP or security certifications (preferred)

Tools

Terraform

CDK

CloudFormation

Job description

Infrastructure and Cloud Security Architect
Your work days are brighter here.

At Workday it all began with a conversation over breakfast. When our founders met at a sunny California diner they came up with an idea to revolutionize the enterprise software market. And when we began to rise one thing that really set us apart was our culture. A culture which was driven by our value of putting our people first. And ever since the happiness development and contribution of every Workmate is central to who we are. Our Workmates believe a healthy employee-centric collaborative culture is the essential mix of ingredients for success in business. That’s why we look after our people communities and the planet while still being profitable. Feel encouraged to shine however that manifests: you don’t need to hide who you are. You can feel the energy and the passion it's what makes us unique. Inspired to make a brighter work day for all and transform with us to the next stage of our growth journey? Bring your brightest version of you and have a brighter work day here.

About the Team

Working as part of the Infrastructure team within Workday’s Business Technology organization you are responsible for the overall security strategy for the platforms and initiatives within this Org. You will partner with Enterprise Security Application teams and across the infrastructure teams to define security standards and best practices. You will partner with Infrastructure leads to set prioritization and ensure adoption of these standards across different teams and guide technical solutions. The right candidate for this role is a Security Champion who has experience across Network Datacenter infrastructure cloud application security and familiar with threat modeling CIS NIST Standards and is able to influence and ensure its realization through direct and indirect influence.

Contributions to the security community such as open source tools research papers conference talks etc. are a plus!

About the Role

• Define and maintain standards aligned to ensure NIST and CIS compliance.
• Engage in system design engineering and maintenance to provide technical security guidance across infra programs and initiatives.
• Develop and maintain security context in reference architecture and its prototypes.
• Identify and mitigate security issues misconfigurations and vulnerabilities related to cloud and corporate infrastructure and applications.
• Partner with security engineering observability and vulnerability management to define logging alerting patching backup and recovery capabilities and detect prioritize remediate issues and threats across infrastructure assets.
• Participate in thread modeling security incident response lead incidents and perform post-incident reviews with engineering teams.
• Develop evangelize and monitor the adoption of best cloud security practices.
• Participate in tabletop and security preparedness exercises.
• Build positive relationships with peers across the company to evangelize a strong security culture.
• Partner with Enterprise Architecture and Security to recommend and guide investments to realize best in class security posture.

About You

• Minimum 10+ years of technology proven experience in infrastructure and security solutions.
• Hands‑on experience designing and building scalable and resilient applications in the cloud (AWS GCP Azure) AWS Preferred.
• Experience with technical and security architecture database architecture virtualization software design development IP Networking Linux Agile Scrum java python integration collaboration technologies.
• Build reports and dashboards for driving security outcomes.
• Experience with CI/CD pipeline for automated security testing.
• Hands‑on experience in AWS Networking Firewall and Security modules.
• Experience delivering software using engineering standard methodologies and principles.
• Extensive knowledge of infrastructure as code (Terraform CFT CDK etc.).
• Consulting and leadership experience interacting with senior and executive leaders across business and technology.
• Familiarity with the principles of network and endpoint security current threat and attack trends and have a working knowledge of security principles such as defense in depth.
• Ability to use the principles and practices of project management.
• Passion for new technologies and cloud trends.
• Degree in Computer science or comparable technical degree. Preferred CISSP and security certifications.

Workday Pay Transparency Statement

The annualized base salary ranges for the primary location and any additional locations are listed below. Workday pay ranges vary based on work location. As a part of the total compensation package this role may be eligible for the Workday Bonus Plan or a role-specific commission/bonus as well as annual refresh stock grants. Recruiters can share more detail during the hiring process. Each candidate’s compensation offer will be based on multiple factors including but not limited to geography experience skills job duties and business need among other things. For more information regarding Workday’s comprehensive benefits.

Primary Location: USA.CA.Pleasanton

Primary Location Base Pay Range: $164700 USD - $247000 USD

Additional US Location(s) Base Pay Range: $ USD - $247000 USD

Our Approach to Flexible Work

With Flex Work we’re combining the best of both worlds: in-person time and remote. Our approach enables our teams to deepen connections maintain a strong community and do their best work. We know that flexibility can take shape in many ways so rather than a number of required days in-office each week we simply spend at least half (50%) of our time each quarter in the office or in the field with our customers prospects and partners (depending on role). This means you'll have the freedom to create a flexible schedule that caters to your business team and personal needs while being intentional to make the most of time spent together. Those in our remote 'home office' roles also have the opportunity to come together in our offices for important moments that matter.

Equal Opportunity Employer

Pursuant to applicable Fair Chance law Workday will consider for employment qualified applicants with arrest and conviction records.

Workday is an Equal Opportunity Employer including individuals with disabilities and protected veterans.