3 days ago
Base Salary
$144k - $258k/yr
Responsibilities
- Design, architect, and operate enterprise-wide User Access Review programs across cloud and on-premises environments.
- Automate identity certification workflows, review cadences, entitlement cataloging, and revocation processes in IGA platforms.
- Partner with auditors to align access reviews with SOX, SOC 2, and ISO 27001 requirements and deliver audit-ready reporting.
- Implement Zero Standing Privileges and Just-In-Time provisioning alongside periodic access reviews.
- Apply AI/ML to risk-based reviews, anomaly detection, automated revocation recommendations, threat detection, and access control.
- Develop secure identity services, security architecture, contextual authorization, and identity governance policies.
- Own identity security and governance across departments while influencing stakeholders from engineers through the C-suite.
- Scale identity solutions as internal products while balancing security controls, operational efficiency, adoption, and user experience.
Requirements
- Bachelor’s degree or higher in Computer Science, Cybersecurity, Information Security, or a related field.
- At least 7 years of IT or information security experience, or at least 4 years with a master’s degree.
- Hands-on experience designing, launching, and managing enterprise-scale User Access Review and access certification campaigns.
- Experience with Okta, including IAM and Workflows.
- Deep expertise with Okta Identity Governance, SailPoint, or Saviynt for automated UAR campaigns, entitlement cataloging, and remediation.
- Familiarity with identity lifecycle management concepts, including source of truth.
- Practical experience with regulatory compliance, audit readiness, and identity gap remediation.
- Experience orchestrating certifications across heterogeneous systems, mapping entitlements, and enforcing regulatory controls.
- Experience building secure systems and applying AI/ML to risk scoring and access control.
- Experience assessing and mitigating weaknesses in identity infrastructure and monitoring current threats.
- Knowledge of Zero Trust, identity management, MFA, SSO, SAML, OIDC, and LDAP.
- Strong communication and stakeholder-influence skills, including translating identity risk into business impact.
- CISSP or equivalent certification is preferred.
Benefits
- Flexible work model with at least 50% of each quarter spent in the office or in the field with customers, prospects, and partners.
- Potential eligibility for the Workday Bonus Plan or role-specific bonus and annual refresh stock grants.
- Equal opportunity employment and reasonable accommodation support.
Categories
About Workday
Workday builds cloud-based enterprise applications for human capital management and financial management, including payroll, time tracking, expenses, planning, and procurement, sold on a subscription basis with professional services. Founded in 2005 and headquartered in Pleasanton, California, it is a public company traded on NASDAQ as WDAY. Organizations worldwide use Workday to unify HR and finance data, automate processes, and apply AI to workforce and financial operations.