24 hours ago
Responsibilities
- Translate security policies into testable, automated code to create non-bypassable compliance controls.
- Design and execute the roadmap for automating security governance, compliance verification, and control enforcement.
- Embed security controls into CI/CD pipelines and drive adoption of DevSecOps practices.
- Develop secure, reusable Terraform and CloudFormation modules for engineering teams.
- Architect, implement, and secure infrastructure and services across major cloud providers and multi-cloud environments.
- Lead complex technical security initiatives, mentor junior staff, and influence security governance decisions.
- Communicate technical security risks and compliance requirements in clear business terms to executive leadership.
Requirements
- 7+ years of progressive, hands-on engineering experience, including security architecture and complex security initiatives, with 2+ years focused on security governance and compliance.
- Deep hands-on experience architecting, implementing, and securing infrastructure and services within AWS, GCP, or Azure at scale.
- Strong proficiency in at least one scripting language, such as Python, Go, Bash, or Ruby.
- Expertise in cloud security architectures, technologies, network security, application security, platform security, threat landscapes, attack vectors, and mitigation techniques.
- Experience architecting, implementing, and promoting secure Infrastructure as Code practices and automation at scale using Terraform or CloudFormation.
- Relevant industry certifications or focused training, such as AWS Certified Security - Specialty, Google Professional Cloud Security Engineer, Certified Kubernetes Administrator, or Certified Kubernetes Security Specialist.
- Experience implementing, auditing, and maintaining controls for NIST CSF and ISO 27001.
- Strong communication, presentation, interpersonal, analytical, and stakeholder-influencing skills.
Benefits
- Flexible work arrangement requiring at least 50% of each quarter in the office or in the field, with remote home-office options and opportunities to meet in company offices.
- Potential eligibility for the Workday Bonus Plan or role-specific commission/bonus and annual refresh stock grants.
- Workday provides reasonable accommodations and is an equal opportunity employer.
Tech Stack
Categories
About Workday
Workday builds cloud-based enterprise applications for human capital management and financial management, including payroll, time tracking, expenses, planning, and procurement, sold on a subscription basis with professional services. Founded in 2005 and headquartered in Pleasanton, California, it is a public company traded on NASDAQ as WDAY. Organizations worldwide use Workday to unify HR and finance data, automate processes, and apply AI to workforce and financial operations.