Incident Manager

We’re obsessed with making hard work pay off, for our people, our customers, and the world around us. As a Fortune 500 company and a leading AI platform for managing people, money, and agents, we’re shaping the future of work so teams can reach their potential and focus on what matters most. The minute you join, you’ll feel it. Not just in the products we build, but in how we show up for each other. Our culture is rooted in integrity, empathy, and shared enthusiasm. We’re in this together, tackling big challenges with bold ideas and genuine care. We look for curious minds and courageous collaborators who bring sun-drenched optimism and drive. Whether you're building smarter solutions, supporting customers, or creating a space where everyone belongs, you’ll do meaningful work with Workmates who’ve got your back. In return, we’ll give you the trust to take risks, the tools to grow, the skills to develop and the support of a company invested in you for the long haul. So, if you want to inspire a brighter work day for everyone, including yourself, you’ve found a match in Workday, and we hope to be a match for you too.

As an Incident Manager, you will coordinate the response to major incidents affecting Workday customers. You’ll bring together the right engineering, support, and business teams, establish clear priorities, and guide the response toward safe, timely service restoration.

Working within a global team that operates around the clock, you’ll gain broad exposure to Workday’s services and architecture, including on-premise and cloud-based environments. Your impact will extend beyond recovery: you’ll help turn incident findings into practical changes that improve detection, simplify response, and reduce recurrence.

In this role, you will:

• Lead major incident response, coordinating responders, clarifying responsibilities, managing escalations, and keeping customer recovery at the center of decisions.
• Provide timely, concise updates to Support teams, engineering partners, and senior leadership. Clearly communicate customer impact, recovery progress, risks, and uncertainty.
• Partner with service teams to identify detection gaps and improve actionable alerts, health checks, and other signals that help identify issues before customers report them.
• Improve response readiness through clearer runbooks, service context, change visibility, and initial mitigation steps.
• Facilitate blameless root cause analysis and post-incident reviews. Help teams define meaningful corrective actions, establish ownership, and follow through on progress.
• Analyze incident trends, mean time to detect (MTTD), and mean time to resolve (MTTR). Use findings to recommend and measure improvements that reduce customer disruption.
• Simplify incident workflows and identify opportunities to automate communications, reporting, and repetitive tasks.
• Share lessons across teams and build partnerships that make resilience part of everyday service ownership.

You bring structure to uncertain situations and help people work together when the pressure is high. You combine technical judgment with clear communication, ask thoughtful questions, and keep customer needs in focus. You care equally about restoring service today and improving resilience for tomorrow.

• 5+ years of related experience in incident management, customer escalations, technical operations, or technical support.
• Experience leading major production incidents as an incident commander, coordinating technical teams and managing escalations through service restoration.
• Experience applying IT service management practices, such as ITIL, to incident response and problem management.

• Major incident management and incident command: Experience establishing priorities, assigning response activities, and making timely decisions with incomplete information. You provide calm direction while adapting as new information becomes available.
• Technical analysis and troubleshooting: Ability to interpret technical details, recognize service dependencies, ask effective diagnostic questions, and test assumptions with engineering teams. You can guide recovery without needing to implement every fix yourself.
• Stakeholder and crisis communication: Experience translating complex technical situations into clear written and verbal updates for different audiences. You distinguish confirmed facts from uncertainty and explain impact, progress, and decisions needed.
• Cross-functional collaboration and influence: Ability to bring teams together without direct authority, navigate competing priorities, and constructively address delays. You encourage shared accountability and keep the focus on recovery rather than blame.
• Problem management and systemic prevention: Experience facilitating blameless investigations, separating symptoms from underlying causes, and evaluating whether corrective actions will prevent recurrence or improve detection and recovery.
• Data-driven continuous improvement: Ability to interpret incident trends and response metrics, identify bottlenecks, and turn findings into measurable improvements. You recognize opportunities to improve data quality, simplify processes, and reduce manual work through automation.

At Workday, we value our candidates’ privacy and data security.  Workday will never ask candidates to apply to jobs through websites that are not Workday Careers. 

Please be aware of sites that may ask for you to input your data in connection with a job posting that appears to be from Workday but is not.

In addition, Workday will never ask candidates to pay a recruiting fee, or pay for consulting or coaching services, in order to apply for a job at Workday.