Sr Manager, Infrastructure Security Innovation

Your work days are brighter here.

We’re obsessed with making hard work pay off, for our people, our customers, and the world around us. As a Fortune 500 company and a leading AI platform for managing people, money, and agents, we’re shaping the future of work so teams can reach their potential and focus on what matters most. The minute you join, you’ll feel it. Not just in the products we build, but in how we show up for each other. Our culture is rooted in integrity, empathy, and shared enthusiasm. We’re in this together, tackling big challenges with bold ideas and genuine care. We look for curious minds and courageous collaborators who bring sun-drenched optimism and drive. Whether you're building smarter solutions, supporting customers, or creating a space where everyone belongs, you’ll do meaningful work with Workmates who’ve got your back. In return, we’ll give you the trust to take risks, the tools to grow, the skills to develop and the support of a company invested in you for the long haul. So, if you want to inspire a brighter work day for everyone, including yourself, you’ve found a match in Workday, and we hope to be a match for you too.

About the Team

InfraSec Innovation is the engineering arm of Infrastructure Security - building the secure-by-default controls and paved roads that protect our private and public cloud. We sit alongside InfraSec Reliability (Ops) and Enablement (Product & Portfolio Management), partnering tightly with Platform/Service Owners, Networking, Identity, Cybersecurity, and Compliance to ship guardrails that scale across regions and services. The team owns the full lifecycle—design, build, ship, operationalize, and evidence - with an automation-first stack (IaC, policy-as-code, CI/CD) and clear SLOs for control availability and signal quality. We’re a low-ego, hands-on group that measures outcomes, fixes root causes, and makes the secure path the easiest path.

About the Role

The Senior Manager, InfraSec Innovation (Engineering) leads the team that turns our infrastructure security strategy into shipped, operable controls for Workday’s private and public cloud. You’ll partner with the InfraSec Product Owner on what to build and own how it gets built—coaching engineers, setting standards, and delivering secure-by-default “paved roads” that scale across regions and services. Success looks like predictable delivery, strong SLOs, clean audit evidence, and guardrails that make the secure path the easiest path.

Responsibilities:

• Lead, coach, and grow a high-performing security engineering team; drive hiring, career development, and performance.

• Own the delivery lifecycle for security controls (design → build → ship → operationalize → evidence) across cloud, platform, and container/K8s layers.

• Serve as Agile Leader: plan increments/sprints, manage capacity, remove blockers, and ensure Definition of Ready/Done.

• Build secure-by-default “paved roads” (modules, APIs, policy-as-code) that simplify adoption for platform and product teams.

• Engineer for operability with InfraSec Reliability (Ops): define SLOs, on-call readiness, runbooks, dashboards, and incident playbooks.

• Partner with Product Owner, Platform and Service Owners, Cybersecurity, Networking, Identity, and Compliance to prioritize highest-value outcomes and close risk.

• Advance automation and quality: IaC, CI/CD, policy-as-code, telemetry/observability, and data pipelines for better signal fidelity.

• Steward platforms and integrations (e.g., CNAPP/CSPM, KMS/PKI, EDR, runtime protections) including upgrades and migrations with minimal impact.

• Establish reference architectures, golden patterns, and secure defaults; enforce standards through code and reviews.

• Measure what matters: delivery predictability, control SLO attainment, detection coverage/quality, change failure rate, MTTM/MTTR.

About You

You’re an engineering-first security leader who turns strategy into shipped, operable controls. You’ve built teams, paved roads, and scalable guardrails for private and public clouds (AWS, GCP, Azure) and Kubernetes platforms and you measure success with SLOs, clean audit evidence, and predictable delivery. You’re as comfortable coaching engineers and removing blockers as you are diving into Terraform, policy-as-code, or a CI/CD pipeline to keep outcomes moving.

Basic Qualifications

• 10+ years in cybersecurity/platform engineering with 4+ years leading engineers/tech leads; 2+ years managing other managers.

• Proven track record designing, building, and operating cloud security controls at enterprise scale (AWS/