Senior Software Development Engineer - Data Security and Protection

Experience: Not Available to Not Available years

Location: Chennai, Tamil Nadu, India

Skills: Java, Go, Scala, OAuth2, OIDC, SAML, Open Policy Agent, OWASP, AWS, GCP, RBAC, ABAC, ReBAC

About the Team
Our Chennai office is a thriving tech hub driving core innovations for Workday's global footprint. In the Security Platform group, you will solve complex, large-scale security challenges that impact millions of users worldwide. We offer a highly collaborative workplace, competitive compensation, comprehensive benefits, and a culture that genuinely values work-life balance and continuous career growth.

About the Role
As a P4 Senior Software Engineer, you will be a technical leader within the Security Platform organization. Your primary focus will be designing next-generation authorization frameworks, fine-grained access control systems, and distributed data security models that operate at a massive scale. You will not only write critical path code but also mentor junior engineers and influence the architectural roadmap for Workday’s global security infrastructure.

Key Responsibilities
Architecture & Leadership: Lead the architectural design and implementation of highly available, low-latency authorization and access control services.
Data Security: Define and implement robust data security boundaries, zero-trust architectures, and policy enforcement points across distributed systems.
Technical Excellence: Drive best practices for code quality, security compliance, multi-tenancy isolation, and system performance optimizations.
Mentorship:



Guide, mentor, and unblock P3 and associate engineers on the team, fostering a culture of continuous learning and technical rigor.
Cross-Functional Impact: Partner with security architects, compliance teams, and broad engineering organizations to seamlessly integrate authorization patterns across all Workday applications.

About You
Basic Qualification:
Experience: 7+ years of software engineering experience, with a proven track record of delivering enterprise-grade identity, access management (IAM), or authorization solutions.
Domain Expertise: Deep understanding of access control models (RBAC, ABAC, ReBAC), OAuth2, OIDC, SAML, and modern policy engines (e.g., Open Policy Agent - OPA).
Distributed Systems: Strong experience building high-throughput, low-latency distributed systems using Java, Go, or Scala.
Security Mindset: Deep knowledge of OWASP top 10, threat modeling, and secure design principles for distributed cloud architectures (AWS/GCP).
Soft Skills: Excellent communication and stakeholder management skills; proven ability to lead technical initiatives independently.

Our Approach to Flexible Work
With Flex Work, we’re combining the best of both worlds: in-person time and remote.



Our approach enables our teams to deepen connections, maintain a strong community, and do their best work. We know that flexibility can take shape in many ways, so rather than a number of required days in-office each week, we simply spend at least half (50%) of our time each quarter in the office or in the field with our customers, prospects, and partners (depending on role). This means you'll have the freedom to create a versatile schedule that caters to your business, team, and personal needs, while being intentional to make the most of time spent together. Those in our remote "home office" roles also have the opportunity to come together in our offices for important moments that matter.

At Workday, we are committed to providing an accessible and inclusive hiring experience where all candidates can fully demonstrate their skills. If you require assistance or an accommodation at any point, please email [email protected].
Are you being referred to one of our roles? If so, ask your connection at Workday about our Employee Referral process! At Workday, we value our candidates’ privacy and data security. Workday will never ask candidates to apply to jobs through websites that are not Workday Careers. Please be aware of sites that may ask for you to input your data in connection with a job posting that appears to be from Workday but is not. In addition, Workday will never ask candidates to pay a recruiting fee, or pay for consulting or coaching services, in order to apply for a job at Workday.

📌 Senior Software Development Engineer Data Security and Protectio (Chennai)
🏢 Workday
📍 Chennai