Technical Lead – User Access Review

Job Description

Sr. IAM Cybersecurity Engineer, Enterprise Identity | Workday

The Tone:
This is a full-time role at Workday, located in Reston, VA (hybrid). Workday is a leading AI platform for managing people, money, and agents, shaping the future of work for global teams. This role is crucial in delivering secure identity and access management for the entire Workday organization, protecting against access creep and ensuring continuous governance and compliance. As a core member of the Enterprise Identity team, you will make a meaningful impact at a global technology leader.

The TL;DR
• Role: Full Time
• Type: Full-time
• Location: Hybrid – Reston, VA
• Pay: $144400–$258000 yearly
• Team: Enterprise Identity team within Workday’s Cyber Security function as a key part of Enterprise Security.
• Mission: Lead Workday’s User Access Review (UAR) strategy and execution to eliminate access creep and ensure continuous governance and compliance across identity systems.
• Tech Stack: Okta (IAM, Workflows), Okta Identity Governance, SailPoint, Saviynt

What You’ll Actually Do
• Lead: Design, architect, and run enterprise-wide User Access Review (UAR) programs across cloud and on-prem environments.
• Automate: Automate certification workflows and review cadences within Identity Governance and Administration (IGA) platforms to enhance accuracy and reduce administrative effort.
• Partner: Collaborate with internal and external auditors to align UAR with SOX, SOC2, and ISO 27001, and deliver audit-ready reporting.
• Implement: Apply AI/ML to enable risk-based reviews, automated revocation suggestions, and anomaly detection to strengthen identity security.
• Strategize: Evolve security policies and procedures toward modern, least-privilege identity approaches, influencing stakeholders across all departments.

The Must-Haves
• Background: Bachelor’s degree or higher in Computer Science, Cybersecurity, Information Security, or a related field; a senior-level engineer focused on enterprise identity and cybersecurity.
• Experience: 7+ years of IT or infosec experience (4+ with an MS), hands-on experience designing, launching, and managing enterprise-scale UAR and access certification campaigns, and experience with Okta (IAM, Workflows) and deep expertise in IGA tooling (Okta Identity Governance, SailPoint, Saviynt).
• Skills: Orchestrating complex certifications across heterogeneous systems, mapping entitlements, enforcing regulatory controls, making sound risk-based judgments, and strong communication skills to translate identity risk into business impact.
• Bonus: CISSP or equivalent.