Principal Cloud IAM Engineer
Core
Architecting and leading the strategy, design, and long-term direction of Workday's Identity and Access Management (IAM) program across multi-account AWS environments, enterprise SaaS, and AI-driven workloads.
Role type
Principal Identity and Access Management Architect
Builds
Zero-trust architecture, privileged access governance, identity lifecycle automation, federation at scale, and AI agent security patterns.
Domain
Cloud Security / Identity and Access Management (IAM)
Required skills
AWS IAM (SCPs, Identity Center, ABAC, Organizations), Secrets Management, Okta (SSO, MFA, SCIM), Federation protocols (SAML, OIDC, OAuth2), Terraform, CI/CD integration, AI/Agentic identity lifecycle management, Zero Trust implementation.
Preferred skills
GCP familiarity, AI security tooling (identity-aware proxies, agent observability, LLM access governance), risk mitigation mindset.
Technologies
AWS, Okta, Terraform, SAML, OIDC, OAuth2, AWS Secrets Manager, GCP
Responsibilities
Define IAM patterns for engineers to build against, make architectural decisions for scaling, mentor earlier-career engineers, drive technical alignment across engineering/security/business, design security for AI agents.
Seniority
Principal, strategy & mentorship
