Business Enterprise Systems Transformation (BEST) Security Assurance Engineer

Kelly Services; Boston (MA); Hybrid; USD 124,000 - 145,000; Full time

Job summary

Kelly Services is seeking a Security Architect to lead security strategy, architecture, governance, identity management, and compliance for a large-scale Workday HR and Payroll migration in a hybrid Boston-based contract role. You will partner with executives, cloud vendors, and systems integrators to shape security from design through go-live and ongoing operations.

The role emphasizes cloud security, IAM, SSO, MFA, and governance across a SaaS migration in a complex government-like

Qualifications

• Bachelor’s degree in Computer Science, Systems Analysis, Information Security, Risk Management, or related field.
• 9+ years of IT design and implementation experience.
• Expertise in at least two technical disciplines including infrastructure, networking, application development, APIs, databases, middleware, storage, systems administration, or operations.
• 5+ years of security architecture design and implementation experience.
• Experience developing security architectures, implementation roadmaps, technical controls, policies, and procedures.
• Strong knowledge of security frameworks including NIST, ISO 27000-series, ITIL, SOX, and COBIT.
• Experience designing and implementing cloud security solutions.
• Deep knowledge of IAM, SSO, and MFA.
• Experience integrating security technologies and third-party vendor solutions.
• Knowledge of PAM, DLP, encryption, endpoint security, anti-malware, vulnerability management, patch management, network security, and compliance automation tools.
• Experience conducting risk assessments, business impact assessments, control assessments, and vulnerability assessments.
• Strong communication, analytical, organizational, and business analysis skills.
• Experience using JIRA or similar issue-tracking platforms.
• Security+ or equivalent certification.
• Ability to collaborate across technical, business, vendor, and executive stakeholder groups.

Responsibilities

• Design and implement security architecture, controls, policies, and procedures for a cloud-based Workday HR and Payroll platform.
• Establish security requirements throughout design, development, testing, deployment, and operations.
• Lead IAM strategy including SSO, MFA, Azure AD integration, provisioning, deprovisioning, onboarding, and offboarding processes.
• Define security roles, permissions, workflows, and data access controls.
• Perform security risk assessments, vulnerability assessments, business impact analyses, and control reviews.
• Monitor compliance with security frameworks, regulatory requirements, vendor obligations, and SLAs.
• Oversee security documentation, audit evidence, risk registers, remediation plans, and compliance reporting.
• Support SIEM capabilities and security monitoring processes.
• Coordinate incident response activities, investigations, remediation efforts, and tabletop exercises.
• Evaluate emerging threats, vendor advisories, and vulnerability notifications.
• Review cloud security controls, business continuity plans, disaster recovery procedures, and recovery testing results.
• Collaborate with program leadership, systems integrators, cloud vendors, compliance teams, and independent validation partners.
• Support secure data migration and conversion activities from legacy systems to Workday.
• Evaluate security implications of AI capabilities and governance controls.

Skills

Security architecture

IAM / SSO / MFA

Cloud security

NIST / ISO 27000 / COBIT / ITIL / SOX

Risk assessment

JIRA or similar

Communication / leadership

Stakeholder collaboration

Identity management

Governance & compliance

Education

Bachelor’s degree in Computer Science or related field

Tools

JIRA

Workday Security

Azure Active Directory

SIEM

Snowflake Security

PAM

Job description

$90 - $105

This is an opportunity to join a large-scale public sector enterprise transformation initiative supporting the migration of a legacy Human Resources and Payroll platform to a cloud-based Workday environment serving more than 95,000 employees across a complex government organization. Based in Boston, MA, this hybrid contract role is ideal for a Security Architect who can lead security strategy, architecture, governance, identity management, and compliance efforts across a high-profile SaaS implementation.

This role offers the chance to influence security decisions from design through go-live and ongoing operations while partnering with executive leadership, cloud vendors, systems integrators, compliance teams, and technology organizations. Candidates who enjoy balancing technical security architecture with governance, risk management, cloud security, and stakeholder collaboration will find significant impact and visibility in this transformation program.

Required Skills & Experience

• Bachelor's degree in Computer Science, Systems Analysis, Information Security, Risk Management, or a related field; equivalent experience considered.

• Minimum 9 years of IT design and implementation experience.

• Expertise in at least two technical disciplines including infrastructure, networking, application development, APIs, databases, middleware, storage, systems administration, or operations.

• Minimum 5 years of security architecture design and implementation experience.

• Experience developing security architectures, implementation roadmaps, technical controls, policies, and procedures.

• Strong knowledge of security frameworks including NIST, ISO 27000-series, ITIL, SOX, and COBIT.

• Experience designing and implementing cloud security solutions.

• Deep knowledge of Identity and Access Management (IAM), Single Sign-On (SSO), and Multi-Factor Authentication (MFA).

• Experience integrating security technologies and third-party vendor solutions.

• Knowledge of Privileged Access Management (PAM), Data Loss Prevention (DLP), encryption, endpoint security, anti-malware solutions, vulnerability management, patch management, network security, and compliance automation tools.

• Experience conducting risk assessments, business impact assessments, control assessments, and vulnerability assessments.

• Strong communication, analytical, organizational, and business analysis skills.

• Experience using JIRA or similar issue-tracking platforms.

• Relevant security certification such as Security+ or equivalent.

• Ability to collaborate across technical, business, vendor, and executive stakeholder groups.

Desired Skills & Experience

• Experience securing Human Resources and Payroll systems.

• Hands-on experience with Workday HCM, Payroll, Workday Prism, and Workday security administration.

• Experience implementing security controls within large enterprise or public-sector environments.

• Experience supporting cloud SaaS migrations from legacy on-premises platforms.

• Experience with Microsoft security technologies and services.

• Experience with Snowflake security capabilities.

• Experience with AI governance, AI security controls, and responsible adoption of AI-enabled platforms.

• Experience supporting security audits, compliance programs, and remediation initiatives.

• Experience transitioning operational security ownership from IT teams to business teams.

What You Will Be Doing

• Design and implement security architecture, controls, policies, and procedures for a cloud-based Workday HR and Payroll platform.

• Establish security requirements throughout design, development, testing, deployment, and operations.

• Lead identity and access management strategy including SSO, MFA, Azure Active Directory integration, provisioning, deprovisioning, onboarding, and offboarding processes.

• Define security roles, permissions, workflows, and data access controls.

• Perform security risk assessments, vulnerability assessments, business impact analyses, and control reviews.

• Monitor compliance with security frameworks, regulatory requirements, vendor obligations, and service-level agreements.

• Oversee security documentation, audit evidence, risk registers, remediation plans, and compliance reporting.

• Support implementation of Security Information and Event Management (SIEM) capabilities and security monitoring processes.

• Coordinate incident response activities, investigations, remediation efforts, and tabletop exercises.

• Evaluate emerging threats, vendor advisories, and vulnerability notifications.

• Review cloud security controls, business continuity plans, disaster recovery procedures, and recovery testing results.

• Collaborate with program leadership, systems integrators, cloud vendors, compliance teams, and independent validation partners.

• Support secure data migration and conversion activities from legacy systems to Workday.

• Evaluate security implications of AI capabilities and ensure appropriate governance controls are established.

• Provide strategic guidance on risk mitigation, compliance initiatives, and security investments.

Tech Breakdown

• Workday HR & Payroll Security

• Workday Prism

• Microsoft Azure Active Directory

• Identity & Access Management (IAM)

• Single Sign-On (SSO)

• Multi-Factor Authentication (MFA)

• Security Information and Event Management (SIEM)

• Privileged Access Management (PAM)

• Data Loss Prevention (DLP)

• Snowflake Security

• Cloud SaaS Security

• JIRA

• NIST, ISO 27000, COBIT, ITIL, SOX Compliance Framework

Motion Recruitment Partners (MRP) is an Equal Opportunity Employer. All applicants must be currently authorized to work on a full-time basis in the country for which they are applying, and no sponsorship is currently available. Employment is subject to the successful completion of a pre-employment screening. Accommodation will be provided in all parts of the hiring process as required under MRP's Employment Accommodation policy. Applicants need to make their needs known in advance.