Senior Cloud IAM Engineer - US Federal

Workday, Inc.; Reston (VA); On-site; USD 192,000 - 310,000; Full time

Job summary

Workday Government seeks a Principal Cloud IAM Engineer to secure identities across air-gapped cloud environments for US federal work. You will implement centralized authentication, RBAC, and policy automation, partnering with cloud engineering and cybersecurity teams to meet DoD/Intel requirements.

Applicants must be a US citizen with potential TS/SCI w/CI Poly; DoD 8570/8140 IAT II and CE credential are preferred.

Qualifications

• U.S. citizenship is required.
• Security clearance TS/SCI w/CI Poly preferred; ability to obtain.
• 8+ years in cloud engineering focusing on IAM.
• Experience centralizing authentication/authorization and RBAC/PBAC.
• Infrastructure as Code using Github and Terraform.
• Experience integrating cloud platforms with external auth tools (Okta, EntraID).
• Familiarity with SIEM tools like Splunk for auditing and threat response.
• DoD 8570/8140 compliant with IAT Level II certifications.

Skills

US Citizenship

Security clearance

IAM engineering

RBAC/PBAC

IaC

GitHub

Terraform

Python automation

SSO integration

Okta/EntraID

Splunk

DoD 8570/8140

IAT Level II

CE credential

NIST 800-53

Identity governance

Bachelor's degree

Education

Bachelor's degree in computer science or related field

Tools

Terraform

GitHub

Okta/EntraID

Splunk

SSO protocols (SAML/OIDC)

Job description

Workday Government seeks a Principal Cloud IAM Engineer to secure identities across air-gapped cloud environments for US federal work. You will implement centralized authentication, RBAC, and policy automation, partnering with cloud engineering and cybersecurity teams to meet DoD/Intel requirements.

Applicants must be a US citizen with potential TS/SCI w/CI Poly; DoD 8570/8140 IAT II and CE credential are preferred.