Principal IAM Architect - Cloud Security & AI

Workday; Reston (VA); On-site; USD 167,000 - 300,000; Full time

Job summary

Workday in Reston is seeking a Principal Identity and Access Management Architect to own the strategy, design, and long-term direction of our IAM program. This is not an operational role; you will set patterns, shape how we scale, and work with engineering, security, and Risk leadership to drive alignment.

You’ll cover human and non-human identities, cloud authorization, federation, secrets management, and securing AI agents in production.

Qualifications

• 10+ years of experience in cloud security or IAM with senior/architect-level ownership of strategy.
• Proven AWS IAM foundations SCPs, Identity Center, ABAC, multi-account architecture, and secrets management at scale.
• Demonstrated Okta enterprise-scale SSO and integration with AWS environments.

Responsibilities

• Architect and lead the IAM program strategy and long-term direction.
• Set architectural patterns and scale decisions in collaboration with engineering, security, and Risk.
• Influence cross-functional teams to secure identity and access in complex enterprise environments.

Skills

AWS IAM

IAM SCPs

Okta

Federation

Terraform

CI/CD

NHI lifecycle

Zero Trust

AI security tooling

Threat modeling

Tools

AWS Secrets Manager

Vault

Terraform

Okta

Job description

Workday in Reston is seeking a Principal Identity and Access Management Architect to own the strategy, design, and long-term direction of our IAM program. This is not an operational role; you will set patterns, shape how we scale, and work with engineering, security, and Risk leadership to drive alignment.

You’ll cover human and non-human identities, cloud authorization, federation, secrets management, and securing AI agents in production.