Workday
Principal Cloud IAM Engineer (US Federal)
$173K–$310K
USA.VA.Reston · On-site · Principal · Full-time · Posted Jul 17, 2026
- Experience
- 8+ years as a cloud engineer focused on IAM.
- Education
- Bachelor's degree or higher in computer science, cybersecurity, or comparable work/educational experience (preferred).
- Visa sponsorship
- U.S. citizenship is required.
About the job
Build and operate IAM for Workday’s air-gapped U.S. government cloud, automating identity administration, authentication, authorization, and access controls.
What you'll do
- Automate identity administration, authentication, authorization, and resource permissions in an air-gapped cloud environment.
- Centralize authentication and authorization, including RBAC/PBAC and SSO integrations.
- Work with cloud engineering and cybersecurity teams on infrastructure and compliance as code, CI/CD, logging, auditing, and threat playbooks.
What they ask for
- U.S. citizenship; ability to obtain and maintain a U.S. government security clearance (TS/SCI w/CI Poly may be required).
- 8+ years as a cloud engineer focused on IAM.
- Experience centralizing authentication/authorization and RBAC/PBAC; managing infrastructure as code; and developing automation tools.
- Experience integrating cloud platforms with external identity tools and using a SIEM tool for log aggregation, analysis, threat playbooks, and auditing.
Nice to have
- Active TS/SCI w/CI Poly; DoD 8570/8140 compliance with IAT Level II, current CE credential, and an approved specialty certification.
- Familiarity with NIST 800-53 and DoD/Intel control frameworks, identity governance workflows, and a bachelor’s degree or higher in computer science, cybersecurity, or comparable work/educational experience.
Pay
$191,500 USD - $287,300 USD (base salary); $173,300 USD - $309,600 USD (base salary)
Tools
AWS, Azure/EntraID, GCP, Github, Terraform, Python, Okta, Splunk
Model-written summary · the original posting is authoritative