Sr Manager, DevOps/SRE (Automation Engineering)

Your work days are brighter here.

We’re obsessed with making hard work pay off, for our people, our customers, and the world around us. As a Fortune 500 company and a leading AI platform for managing people, money, and agents, we’re shaping the future of work so teams can reach their potential and focus on what matters most. The minute you join, you’ll feel it. Not just in the products we build, but in how we show up for each other. Our culture is rooted in integrity, empathy, and shared enthusiasm. We’re in this together, tackling big challenges with bold ideas and genuine care. We look for curious minds and courageous collaborators who bring sun-drenched optimism and drive. Whether you're building smarter solutions, supporting customers, or creating a space where everyone belongs, you’ll do meaningful work with Workmates who’ve got your back. In return, we’ll give you the trust to take risks, the tools to grow, the skills to develop and the support of a company invested in you for the long haul. So, if you want to inspire a brighter work day for everyone, including yourself, you’ve found a match in Workday, and we hope to be a match for you too.

About the Team

InfraSec Automation Engineering turns security operations into software. We build platform-agnostic workflows, jobs, and bots implemented in Python that remove toil for InfraSec Operations (T1/T2) and raise reliability for InfraSec Reliability (SRE). Our runners and integrations work across public cloud and private cloud (bare metal, VMs, Kubernetes). We measure success by SLOs, adoption, and hours of toil removed.

About the Role

You’ll lead a hands-on engineering team that designs, builds, and operates automation to make security changes safe, fast, and audit-ready. You own the strategy, standards, and roadmap for event-driven orchestration while staying tooling-flexible (e.g., Tines, Argo/Rundeck/StackStorm, GitHub Actions/Jenkins, or cloud-native services) while keeping the core consistent: Terraform for infrastructure, Python for services/runners, strong integrations with ITSM and ChatOps, and “safe to run more than once” behavior. You’ll partner with InfraSec Operations (execution), InfraSec Reliability (resilience), and InfraSec Innovation (engineering) to deliver measurable reliability and risk reduction.
 

RESPONSIBILITIES

• Set the automation strategy and standards: define principles, guardrails, and patterns (infra-as-code, code review, versioning, security) that scale across public and private cloud.

• Lead the team: hire, mentor, and grow automation engineers; foster a low-ego, metrics-driven culture with clear career paths.

• Own the automation lifecycle: design, build, test, release, operate, retire; keep docs, runbooks, and service contracts current.

• Build reusable “paved roads”: ship libraries, modules, templates, and runners in Python/Terraform that teams can adopt with minimal friction.

• Measure what matters: establish SLIs/SLOs for automations (success rate, latency, error budgets); instruments with logs/metrics/traces and run regular reviews.

• Security and compliance by default: enforce least privilege, secret management, approvals, and evidence-as-you-go artifacts for audits.

• System integration: connect automations to identity, cloud/on-prem platforms, CI/CD, observability, and ITSM/ChatOps via stable APIs and service contracts.

• Prioritize by impact: maintain an intake and roadmap; quantify toil/ROI and sequence work for the highest reliability and risk-reduction gains.

• Operational excellence: design changes with canaries/rollback; ensure workflows are safe to run more than once (retry-safe) and resilient to failures.

• Incident learning loop: convert post-incident findings and recurring issues into durable automation or guardrails.

• Tooling stewardship: evaluate and adopt orchestration solutions as needed (without vendor lock-in); keep costs and vendor relationships in check.

• Stakeholder partnership: work closely with InfraSec Operations, Reliability (SRE), and Innovation Engineering to ensure clean handoffs and strong adoption.

About You

Basic Qualifications

• 10+ years in security/platform/SRE/DevOps with 4+ years leading engineers/tech leads.

• Strong, hands-on proficiency in Python and Terraform (modules, testing, CI/CD, code reviews).

• Experience designing event-driven automations and operating hybrid runners across public cloud and private cloud (bare metal, OpenStack, Kubernetes).

• Proven integrations with ITSM (Jira) and ChatOps (Slack) including approvals, change records, and audit trails.

• Bachelor’s in CS/Cyber/IS or equivalent practical experience; Master’s preferred.
   

Other Qualifications

• Experience with at least one modern workflow/orchestration approach (cloud-native services or GitHub-based workflows, or equivalent).

• Policy-as-code (OPA/Conftest), validation pipelines, and drift detection/remediation.

• Deep observability (metrics/logs/traces) and SLO management for automation workloads.

• Security/compliance mindset (least privilege, secret management, artifact signing).

• Excellent cross-time-zone communication; vendor evaluation and budget stewardship.

Our Approach to Flexible Work
 

With Flex Work, we’re combining the best of both worlds: in-person time and remote. Our approach enables our teams to deepen connections, maintain a strong community, and do their best work. We know that flexibility can take shape in many ways, so rather than a number of required days in-office each week, we simply spend at least half (50%) of our time each quarter in the office or in the field with our customers, prospects, and partners (depending on role). This means you'll have the freedom to create a flexible schedule that caters to your business, team, and personal needs, while being intentional to make the most of time spent together. Those in our remote "home office" roles also have the opportunity to come together in our offices for important moments that matter.

Are you being referred to one of our roles? If so, ask your connection at Workday about our Employee Referral process!

At Workday, we value our candidates’ privacy and data security.  Workday will never ask candidates to apply to jobs through websites that are not Workday Careers. 

  

Please be aware of sites that may ask for you to input your data in connection with a job posting that appears to be from Workday but is not.

  

In addition, Workday will never ask candidates to pay a recruiting fee, or pay for consulting or coaching services, in order to apply for a job at Workday.