Skip to main content
CareerApp

Principal Cloud IAM Engineer

Workday

Reston, VA · full time · Principal

$184,800 – $277,200

Listed on Workday’s own careers site. You apply with them directly — we never stand between you and the employer.

What this role is

This role owns the strategy and architecture of Workday's Identity and Access Management systems across a complex, multi-cloud enterprise environment. You'll lead IAM decisions that shape security posture, drive cross-functional alignment, and help define emerging patterns for securing AI agents—not manage day-to-day operations.

Our summary, not Workday’s wording. The full posting is on their site.

Skills this role names

Log in to see which of these are already on your profile.

What they ask for

Required

  • 10+ years cloud security or IAM experience
  • 3+ years in senior or architect-level role with strategy ownership
  • AWS IAM foundations including SCPs, Identity Center, ABAC, multi-account architecture
  • Enterprise-scale Okta experience with SSO, adaptive MFA, SCIM, lifecycle management
  • Deep knowledge of SAML, OIDC, OAuth2 in complex environments
  • Terraform infrastructure-as-code proficiency
  • Hands-on experience with AI and agentic identity including NHI lifecycle and service-to-service trust
  • Zero Trust implementation in production
  • Ability to drive alignment across teams without direct authority
  • Experience mentoring less senior engineers

Nice to have

  • GCP familiarity
  • AWS Certified Security Specialty
  • Risk mitigation mindset and GRC team engagement
  • AI security tooling experience such as identity-aware proxies or agent observability platforms

Turn on analytics and we load Google Analytics: Google gets the pages you open and what you do here — searches, jobs you view, jobs you apply to — and sets its own cookies. Leave it off and the only cookies we set are your login, your theme, and this answer. Accept All also records a yes to advertising, which nothing uses yet. Privacy Policy.