Workday
Sr. IAM Cybersecurity Engineer, Enterprise Identity
$144K–$258K
USA.VA.Reston +2 · Flex · Senior · Full-time · Posted Oct 27, 2026
- Location
- USA.VA.Reston
USA, GA, Atlanta
USA, CA, Pleasanton - Experience
- 7+ years of IT or infosec experience (4+ with an MS).
- Education
- Bachelor’s degree or higher in Computer Science, Cybersecurity, Information Security, or a related field.
About the job
Leads Workday’s enterprise User Access Review strategy and programs, automating access certification and strengthening identity governance, least privilege, and audit readiness.
What you'll do
- Design and run enterprise access reviews, including certification cycles, entitlement ownership, and access remediation.
- Automate IGA workflows and apply AI/ML to risk-based reviews, anomaly detection, and revocation recommendations.
- Partner with auditors and internal teams to maintain compliance evidence and reporting for SOX, SOC2, and ISO 27001.
What they ask for
- Bachelor’s degree or higher in Computer Science, Cybersecurity, Information Security, or a related field.
- Hands-on experience designing, launching, and managing enterprise-scale UAR and access certification campaigns.
- Experience with Okta (IAM, Workflows) and deep expertise in IGA tooling, including automated UAR campaigns, entitlement cataloging, and remediation.
- Practical experience with regulatory compliance, audit readiness, and identity gap remediation.
Nice to have
- CISSP or equivalent.
- Experience building secure systems and applying AI/ML to risk scoring and access control.
Pay
$159,600 USD - $239,400 USD (base salary); $144,400 USD - $258,000 USD (base salary)
Tools
Okta (IAM, Workflows), Okta Identity Governance, SailPoint, Saviynt, AI/ML, MFA, SSO, SAML
AI focus
Apply AI/ML to risk-based access reviews, revocation suggestions, anomaly detection, threat detection, and risk-based access decisions.
Model-written summary · the original posting is authoritative