Infrastructure and Cloud Security Architect

Your work days are brighter here.

At Workday, it all began with a conversation over breakfast. When our founders met at a sunny California diner, they came up with an idea to revolutionize the enterprise software market. And when we began to rise, one thing that really set us apart was our culture. A culture which was driven by our value of putting our people first. And ever since, the happiness, development, and contribution of every Workmate is central to who we are. Our Workmates believe a healthy employee-centric, collaborative culture is the essential mix of ingredients for success in business. That’s why we look after our people, communities and the planet while still being profitable. Feel encouraged to shine, however that manifests: you don’t need to hide who you are. You can feel the energy and the passion, it's what makes us unique. Inspired to make a brighter work day for all and transform with us to the next stage of our growth journey? Bring your brightest version of you and have a brighter work day here.

About the Team

Working as part of the Infrastructure team within Workday’s Business Technology organization, you are responsible for the overall security strategy for the platforms and initiatives within this Org. You will partner with Enterprise Security, Application teams and across the infrastructure teams to define security standards and best practices. You will partner with Infrastructure leads to set prioritization and ensure adoption of these standards across different teams and guide technical solutions. The right candidate for this role is a Security Champion who has experience across Network, Datacenter infrastructure, cloud, application security and familiar with threat modeling, CIS, NIST Standards and is able to influence and ensure its realization through direct and indirect influence
Contributions to the security community, such as open source tools, research papers, conference talks, etc. are a plus!

About the Role

·       Define and maintain standards aligned to ensure NIST and CIS compliance.

·       Engage in system design, engineering, and maintenance to provide technical security guidance across infra programs and initiatives. 

·       Develop and maintain security context in reference architecture and its prototypes.

·       Identify and mitigate security issues, misconfigurations, and vulnerabilities related to cloud and corporate infrastructure and applications.

·       Partner with security engineering, observability, and vulnerability management to define logging, alerting, patching, backup, and recovery capabilities and detect, prioritize, remediate issues and threats across infrastructure assets.

·       Participate in thread modeling, security incident response, lead incidents, and perform post-incident reviews with engineering teams.

·       Develop, evangelize, and monitor the adoption of best cloud security practices.

·       Participate in tabletop and security preparedness exercises.

·       Build positive relationships with peers across the company to evangelize a strong security culture.

·       Partner with Enterprise Architecture and Security to recommend and guide investments to realize best in class security posture.

 

About You

   Minimum 10+ years of technology proven experience in infrastructure and security solutions.

·       Hands-on experience designing and building scalable and resilient applications in the cloud (AWS, GCP, Azure) AWS Preferred.

·       Experience with technical and security architecture, database architecture, virtualization, software design, development, IP Networking, Linux, Agile, Scrum,  java, python, integration, collaboration technologies 

·       Build reports and dashboards for driving security outcomes.

·       Experience with CI/CD pipeline for automated security testing.

·       Hands-on experience in AWS Networking Firewall and Security modules

·       Experience delivering software using engineering standard methodologies and principles.

·       Extensive knowledge of infrastructure as code (Terraform, CFT, CDK, etc.)

·       Consulting and leadership experience interacting with senior and executive leaders across business and technology.

·       Familiarity with the principles of network and endpoint security, current threat and attack trends, and have a working knowledge of security principles such as defense in depth.

·       Ability to use the principles and practices of project management

·       Passion for new technologies and cloud trends.

.     Degree in Computer science or comparable technical degree. Preferred CISSP and security certifications 

·       

Workday Pay Transparency Statement

The annualized base salary ranges for the primary locati