Identity & Access Management (IAM) Engineer

About the Team

The Enterprise Identity team serves as Workday's first and most critical line of defense. We own, build, and evolve the Identity and Access Management (IAM) systems that govern who has access to internal resources, what they can do with that access, and why. The team works across complex enterprise cloud environments, implementing Zero Trust controls, conditional access policies, and automated workflows for onboarding, role transitions, and offboarding. We also secure autonomous AI agents, non-human identities, and service-to-service trust models, and focus on privileged access governance.

About the Role

We are looking for a skilled Mid-Level IAM Engineer to join our Enterprise Identity team. The role focuses on day-to-day configuration, maintenance, and optimization of our identity tools, solving technical integration challenges, automating repetitive tasks, and ensuring employees and systems have the right access at the right time.

Responsibilities:

• Configure, integrate, and maintain connections between the core identity provider (IdP) and various SaaS applications, internal systems, and APIs.
• Implement and troubleshoot automated user lifecycle workflows (joiner, mover, leaver) to ensure seamless and secure access transitions.
• Act as the initial contact point for identity and access issues in the EU Sovereign Cloud, resolving tier-one directory synchronization or authentication failures.
• Perform regular vulnerability management updates across cloud environments.
• Administer and maintain LDAP, Ory Hydra, and HR-driven identity data feeds.
• Write and maintain scripts to automate routine identity tasks, such as generating access reports or cleaning up orphaned accounts.
• Create and maintain clear technical documentation, architectural diagrams, and standard operating procedures (SOPs) for the IAM ecosystem.

Basic Qualifications

• 3-5 years of experience in IT or Security, with 2+ years administering and configuring IAM solutions.
• Solid experience with tools such as Okta, Microsoft Entra ID, LDAP, Active Directory, or Ory Hydra.
• Understanding of authentication and authorization standards: SAML, OAuth, OIDC, and REST APIs.
• Proficiency in at least one scripting language (GoLang or Python preferred) for API integration and data manipulation.
• Strong analytical problem-solving skills and ability to explain complex technical access issues to non-technical stakeholders.
• Preferable certifications: Security+, Okta Certified Administrator, Microsoft Certified: Identity and Access Administrator Associate, and AWS Cloud Practitioner.
• Bachelor's degree in Computer Science, Cybersecurity, Information Security, or related discipline, or equivalent experience.
• Good understanding of Information Security principles and best practices, including zero-standing privileges.
• Proficiency in programming languages such as Python used for security automation.
• Working knowledge of public cloud platforms (AWS/GCP) and security measures within those environments.
• Understanding of Security by Design principles and ability to conduct security reviews.

Pay

Primary Location: Ireland. Base pay range: €70,200EUR - €105,400EUR. Total compensation may include bonus plans, stock grants, and benefits.

Equal Opportunity

Workday is an Equal Opportunity Employer. We consider applicants regardless of age, ancestry, color, gender, genetic information, marital status, medical condition, disability, national origin, protected family care, race, religion, sexual orientation, military status, or other characteristics protected by law. We also consider applicants with arrest and conviction records. Workday does not accept resumes from recruiters or agencies without a formal agreement.