Workday Systems Administrator

The Senior Cloud Architect will lead complex cloud transformation, cybersecurity, and compliance engagements, helping organizations design, modernize, and secure resilient cloud environments. This senior technical leadership role spans Microsoft Azure, AWS, and Google Cloud, with a focus on translating business objectives, security requirements, and regulatory obligations into scalable architecture solutions. You will serve as a trusted advisor to clients across government, defense, enterprise, and other regulated industries, guiding cloud adoption, Zero Trust implementation, governance, and modernization initiatives. Working closely with engineering, cybersecurity, compliance, and operations teams, you will oversee architecture quality and ensure solutions are secure, supportable, and audit-ready. You will also mentor technical professionals, establish reusable architecture practices, and contribute to strategic consulting opportunities. This fully remote opportunity offers the chance to influence high-impact technology initiatives in complex, security-sensitive environments.

• A bachelor's degree in Computer Science, Engineering, Cybersecurity, Information Systems, or a related field, or equivalent practical experience.

• At least 10 years of progressive experience in technology architecture, engineering, cybersecurity, cloud transformation, or related consulting disciplines.

• At least 7 years of client-facing consulting or architecture experience leading complex technical discussions and delivering tailored solutions for mid-market or enterprise organizations.

• At least 5 years of hands-on cloud architecture experience designing and implementing production solutions in Microsoft Azure, AWS, and/or Google Cloud.

• Demonstrated experience integrating cybersecurity controls and regulatory requirements into cloud architecture designs and implementation roadmaps.

• Strong communication and presentation skills, including the ability to explain technical risks, design tradeoffs, and recommendations to executives, security leaders, auditors, engineers, and business stakeholders.

• Working knowledge of cloud architecture and security methods, including well-architected frameworks, threat modeling, shared responsibility models, Zero Trust, defense-in-depth, and secure-by-design principles.

• Proven ability to navigate ambiguity, balance competing requirements, facilitate decisions, and maintain delivery momentum across multiple stakeholder groups.

• Experience creating high-quality technical documentation, including reference architectures, diagrams, standards, architecture decision records, and implementation guidance.

• Deep expertise in at least three of the following technical domains, with working knowledge of the others:

  • Cloud architecture: Azure, AWS, and/or Google Cloud; landing zones; hybrid connectivity; resilience; disaster recovery; and cloud operating models.

  • Identity and access management: Microsoft Entra ID and cloud-native IAM; federation; Conditional Access; privileged access; just-in-time administration; workload identities; and secrets management.

  • Cloud security operations: Microsoft Defender XDR, Microsoft Sentinel, Defender for Cloud, or comparable AWS and Google Cloud security services; SIEM/SOAR; detection engineering; and threat hunting.

  • Data protection: Encryption, key management, data classification, data loss prevention (DLP), Microsoft Purview or equivalent tools, retention, and secure data lifecycle controls.

  • Network security: Network segmentation, private connectivity, firewalls, secure remote administration, egress controls, DNS security, web application protection, and Zero Trust network access.

  • DevSecOps and automation: Infrastructure-as-code, policy-as-code, CI/CD security, configuration management, PowerShell, Python, KQL, APIs, and automated compliance validation.

  • Governance and compliance: Cloud control frameworks, continuous monitoring, evidence generation, risk management, policy development, and remediation planning.

  • Certification requirement: At least one active certification from the following list is required, or must be obtained within 90 days of hire:

    • Cybersecurity and architecture: CISSP, CCSP, or SABSA certification.

    • Microsoft: AZ-305, AZ-500, or SC-100.

    • AWS: AWS Certified Solutions Architect – Professional or AWS Certified Security – Specialty.

    • Google Cloud: Professional Cloud Architect or Professional Cloud Security Engineer.

    • Additional cloud, security, networking, DevOps, or compliance certifications are preferred. Active certifications are required for consideration.

    • Ability to support U.S. government and defense-related client engagements. Certain projects require eligibility to obtain a U.S. security clearance or meet client-defined access requirements for controlled environments.

    Preferred qualifications:

    • Experience architecting solutions for U.S. government or defense-related environments, including Azure Government, Microsoft 365 GCC High, AWS GovCloud (US), or comparable regulated cloud platforms.

    • Experience implementing or assessing controls for CMMC, NIST SP 800-171, NIST SP 800-53, FedRAMP, Department of Defense impact levels, or similar frameworks.

    • Experience with application and platform modernization, including containers, Kubernetes, serverless architectures, APIs, data platforms, and cloud-native integration patterns.

    • Familiarity with cloud financial governance, including cost allocation, optimization, forecasting, and architecture decisions informed by FinOps practices.

    • Experience providing technical leadership in consulting delivery, mentoring technical teams, performing quality assurance, developing reusable intellectual property, and supporting proposals or statements of work.