Sr Manager, Infrastructure Security Innovation

Your work days are brighter here.

Were obsessed with making hard work pay off for our people our customers and the world around us. As a Fortune 500 company and a leading AI platform for managing people money and agents were shaping the future of work so teams can reach their potential and focus on what matters most. The minute you join youll feel it. Not just in the products we build but in how we show up for each other. Our culture is rooted in integrity empathy and shared enthusiasm. Were in this together tackling big challenges with bold ideas and genuine care. We look for curious minds and courageous collaborators who bring sun-drenched optimism and drive. Whether youre building smarter solutions supporting customers or creating a space where everyone belongs youll do meaningful work with Workmates whove got your return well give you the trust to take risks the tools to grow the skills to develop and the support of a company invested in you for the long haul. So if you want to inspire a brighter work day for everyone including yourself youve found a match in Workday and we hope to be a match for you too.

About the Team

About the Role

The Senior Manager InfraSec Innovation (Engineering) leads the team that turns our infrastructure security strategy intoshipped operable controlsfor Workdays private and public cloud. Youll partner with the InfraSec Product Owner onwhatto build and ownhowit gets builtcoaching engineers setting standards and delivering secure-by-default paved roads that scale across regions and services. Success looks like predictable delivery strong SLOs clean audit evidence and guardrails that make the secure path the easiest path.

Responsibilities:

• Lead coach and grow a high-performing security engineering team; drive hiring career development and performance.

• Own the delivery lifecycle for security controls (design build ship operationalize evidence) across cloud platform and container/K8s layers.

• Serve as Agile Leader: plan increments/sprints manage capacity remove blockers and ensure Definition of Ready/Done.

• Build secure-by-default paved roads (modules APIs policy-as-code) that simplify adoption for platform and product teams.

• Engineer for operability with InfraSec Reliability (Ops): define SLOs on-call readiness runbooks dashboards and incident playbooks.

• Partner with Product Owner Platform and Service Owners Cybersecurity Networking Identity and Compliance to prioritize highest-value outcomes and close risk.

• Advance automation and quality: IaC CI/CD policy-as-code telemetry/observability and data pipelines for better signal fidelity.

• Steward platforms and integrations (e.g. CNAPP/CSPM KMS/PKI EDR runtime protections) including upgrades and migrations with minimal impact.

• Establish reference architectures golden patterns and secure defaults; enforce standards through code and reviews.

• Measure what matters: delivery predictability control SLO attainment detection coverage/quality change failure rate MTTM/MTTR.

About You

Youre an engineering-first security leader who turns strategy into shipped operable controls. Youve built teams paved roads and scalable guardrails for private and public clouds (AWS GCP Azure) and Kubernetes platforms and you measure success with SLOs clean audit evidence and predictable delivery. Youre as comfortable coaching engineers and removing blockers as you are diving into Terraform policy-as-code or a CI/CD pipeline to keep outcomes moving.

Basic Qualifications

• 10 years in cybersecurity/platform engineering with 4 years leading engineers/tech leads; 2 years managing other managers.

• Proven track record designing building and operating cloud security controls at enterprise scale (AWS/Azure/GCP) and Kubernetes.

• Hands-on with IaC and automation (e.g. Terraform) policy-as-code (e.g. OPA) CI/CD and at least one language (Python or similar).

• Bachelors degree in CS Cybersecurity or related field; Masters or equivalent practical experience preferred.

Other Qualifications

• Experience leading teams that build secure-by-default paved roads (modules APIs guardrails) adopted by platform/product teams.

• Depth in one or more: identity & secrets KMS/PKI network segmentation/zero trust container/runtime protections vuln/config management.

• Familiarity with CNAPP/CSPM/EDR ecosystems and stewarding upgrades/migrations with minimal business impact.

• Operability mindset: define/track SLOs create runbooks & dashboards prepare on-call rotations and drive incident readiness.

• Strong partnership skills with Product Service SOC Platform Networking Identity and Compliance to prioritize high-value outcomes.

• Comfortable in regulated environments (e.g. FedRAMP SOC 2 ISO 27001); evidence as you go practices for audits.

• Excellent communication and influenceable to align senior leadership and cross-functional teams around clear measurable goals.

• Budget/resource stewardship and an eye for continuous improvement: throughput change failure rate MTTM/MTTR and signal quality.

Our Approach to Flexible Work

With Flex Work were combining the best of both worlds: in-person time and remote. Our approach enables our teams to deepen connections maintain a strong community and do their best work. We know that flexibility can take shape in many ways so rather than a number of required days in-office each week we simply spend at least half (50%) of our time each quarter in the office or in the field with our customers prospects and partners (depending on role). This means youll have the freedom to create a flexible schedule that caters to your business team and personal needs while being intentional to make the most of time spent together. Those in our remote home office roles also have the opportunity to come together in our offices for important moments that matter.

Are you being referred to one of our roles If so ask your connection at Workday about our Employee Referral process!

At Workday we value our candidates privacy and data security. Workday will never ask candidates to apply to jobs through websites that are not Workday Careers.

Please be aware of sites that may ask for you to input your data in connection with a job posting that appears to be from Workday but is not.

In addition Workday will never ask candidates to pay a recruiting fee or pay for consulting or coaching services in order to apply for a job at Workday.