Sr Data Security Architect

Your work days are brighter here.At Workday, it all began with a conversation over breakfast. When our founders met at a sunny California diner, they came up with an idea to revolutionize the enterprise software market. And when we began to rise, one thing that really set us apart was our culture. A culture which was driven by our value of putting our people first. And ever since, the happiness, development, and contribution of every Workmate is central to who we are. Our Workmates believe a healthy employee-centric, collaborative culture is the essential mix of ingredients for success in business. That’s why we look after our people, communities and the planet while still being profitable. Feel encouraged to shine, however that manifests: you don’t need to hide who you are. You can feel the energy and the passion, it's what makes us unique. Inspired to make a brighter work day for all and transform with us to the next stage of our growth journey? Bring your brightest version of you and have a brighter work day here.About the TeamThe Workday Data Platform Engineering Organization in Business Technology (BT) needs a Data Security Architect to manage the next generation of data platform, tooling, reusable frameworks and services in the AWS cloud. We take pride in enabling data driven business outcomes to mobilize Workday’s growth through trusted data excellence, innovation, architecture, and thought leadership. The team's key objective is to empower data engineers, data scientists, BI Analysts, and various business partners through building scalable data platforms, tooling/reusable frameworks, data quality and anomalydetection frameworks to fuel strategic business decisions, reducing decision latency using self-service architecture in cloud environments.The BT Data Platform will be the central data repository with various data domain assets of decision-making process through self-service dashboards, domain specific ad-hoc self-self-capability. Also, it will be source for ML engineering self-service business owned pipelines through configurable templates, storage for ML features and model outcomes, place for test and training the models, upstream and downstream integration layer or data source for these layers.About the RoleWorking as part of the Enterprise Architecture & Data (EA&D) team within Workday’s Business Technology organization, you are responsible for the overall security strategy for the Data Platform & Support initiatives. As a Sr Cloud Security Architect, you will partner with Systems Engineering, SecOps, DevOps and Networking teams to develop and implement best-practices for the Data Platform team. You will partner with data platform leads to set prioritization with different teams and guide technical solution discussions. The right candidate for this role is a Security Champion who has experience in Cloud Security Posture Management tooling and collaborates with Engineering and Development Teams to implement best-practices and align cloud environments with internal standards and compliance requirements.Contributions to the security community, such as open source tools, research papers, conference talks, etc. are a plus!What you will do:Identify and mitigate security issues, misconfigurations, and vulnerabilities related to Data Platform’s cloud infrastructure.Build and extend scanning and monitoring to ensure we quickly detect misconfigurations and anomalous behavior in our cloud infrastructure.Research and deploy corporate security solutions to create a secure environment for our employees to be productive in their daily tasks, including endpoints, email, browsing, file sharing, network security, physical security, and any 3P software and SaaS integrations.Augment our infrastructure with audit trails and build detections to ensure that we can effectively and critically identify and investigate known and emerging threats.Participate in security incident response, lead incidents, and perform post-incident reviews with engineering teams.Develop, evangelize, and monitor the adoption of best cloud security practices.Represent Data Platform’s security engineering within and outside of the company.We’re looking for someone who can build positive relationships with peers across the company to evangelize a strong security culture.Identifies impactful and practical solutions for security, from easy opportunities to long-term investments.Research and implement sophisticated detection and response tools within the cloudAct as an escalation point for the Security Operations team for security events within our cloud environmentsSolve security service/application problems and work with the vendor and other workday security team to resolve issues and vulnerabilities. Test, implement and handle new security services as necessaryAbout YouBasic Qualifications:Minimum 10+  years of technology proven experience in building cloud security solutions.Minimum 5 Years hands-on experience in 1 or more languages (Python, Java, Go etc.).Hands-on experience designing and building scalable and resilient applications in the cloud (AWS, GCP, Azure) AWS Preferred.Build reports and dashboards for driving security outcomes.Experience with CI/CD pipeline for automated security testing.Hands-on experience in AWS Networking Firewall and Security modulesServerless hands-on development and architecture experience implementing Lambda, API Gateway, Step Functions, etcExperience delivering software using engineering standard methodologies and principles.Extensive knowledge of infrastructure as code (Terraform, CFT, CDK, etc.)Familiarity with the principles of network and endpoint security, current threat and attack trends, and have a working knowledge of security principles such as defense in depthOther Qualifications:Ability to use the principles and practices of project managementPassion for new technologies and cloud trends.LI-KS4As a federal contractor, Workday is requiring all new hires to verify that they are fully-vaccinated against COVID-19 within 72 hours of beginning employment with Workday, consistent with applicable law. Workday is an equal opportunity employer. Candidates who are not vaccinated due to a sincerely held religious belief, medical reasons, or other legally-protected reason should contact accommodations@workday.com to explore what, if any, reasonable accommodations or exemptions Workday is able to offer.Workday Pay Transparency StatementThe base pay range for the primary location of this job is listed below. Workday pay ranges vary based on work location. As a part of the total compensation package, this role may be eligible for the Workday Bonus Plan or a role-specific commission/bonus, as well as annual refresh stock grants. Recruiters can share more detail during the hiring process. Each candidate’s compensation offer will be based on multiple factors including, but not limited to, geography, experience, skills, future potential and internal pay parity. For more information regarding Workday’s comprehensive benefits, please click here.Primary Location: USA.CA.PleasantonBase Pay Min to Max Range: $160,200 - $240,200Pursuant to applicable Fair Chance law, Workday will consider for employment qualified applicants with arrest and conviction records.Workday is an Equal Opportunity Employer including individuals with disabilities and protected veterans.Are you being referred to one of our roles? If so, ask your connection at Workday about our Employee Referral process!