Senior IAM Security Engineer — Zero-Trust & JIT

Workday; Atlanta (GA); Hybrid; USD 144,000 - 258,000; Full time

Job summary

Workday is seeking a Sr. IAM Cybersecurity Engineer to lead and design identity security across the organization. This role focuses on IAM, ILM, IGA, and PAM, implementing Zero Standing Privileges and Just-In-Time provisioning to minimize elevated access.

You will collaborate with business leaders to align security with enterprise strategy, drive policy and technical decisions, and ensure secure identity for employees and clients globally.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Security, or a related discipline.

Responsibilities

• Understand business needs with leaders to anticipate threats against the organization.
• Assist with cybersecurity risk identification, assessment, and evaluation across the enterprise.
• Lead and maintain a comprehensive Identity program (IAM, ILM, IGA, and PAM).
• Architect Zero Standing Privileges (ZSP) frameworks and dynamic authorization models.
• Champion ZSP with Just-In-Time (JIT) provisioning and contextual access evaluations.
• Collaborate with product owners to develop secure requirements and integrate contextual authorization.
• Lead policy development for identity security and least-privilege approaches.
• Interact with staff and management across departments on security governance.

Skills

Okta IAM

IGA tooling

Identity lifecycle

Zero Trust

MFA/SSO/SAML/OIDC

Scripting

Communication

Education

Bachelor's degree in CS/Cybersecurity/InfoSec or related

Tools

Okta Identity Governance

SailPoint

LDAP

Job description

Workday is seeking a Sr. IAM Cybersecurity Engineer to lead and design identity security across the organization. This role focuses on IAM, ILM, IGA, and PAM, implementing Zero Standing Privileges and Just-In-Time provisioning to minimize elevated access.

You will collaborate with business leaders to align security with enterprise strategy, drive policy and technical decisions, and ensure secure identity for employees and clients globally.