Corporate System Security Administrator (15105, Grade 28)

Maryland-National Capital Park and Planning Commission; Riverdale Park (MD); Hybrid; USD 95,000 - 130,000; Full time

Job summary

Maryland-National Capital Park and Planning Commission is seeking a Workday Security Administrator within the Office of the Chief Information Officer and the EIT program. You will design, configure, and monitor security controls across Workday HCM, Payroll, Benefits, Finance, and related systems.

You will lead access reviews, maintain security policies, and collaborate with Information Security, Internal Audit, HR, Finance, and vendors to ensure compliant, auditable security across enterprise

Qualifications

• Bachelor’s degree in Business Management, Computer Science, Information Systems or related field.
• Four (4) years of experience in Enterprise Resource Planning Systems or related experience.
• An equivalent combination of education and experience may be substituted, totaling six (8) years.

Responsibilities

• Administers the Workday security framework and related access controls.
• Performs access reviews, certifications, and approvals.
• Coordinates identity controls (SSO, MFA) with technical teams.
• Investigates security incidents and coordinates remediation.
• Maintains security procedures, records, and audit evidence.
• Provides security guidance and training to functional teams.

Skills

Workday security

Identity & access management

RBAC / least privilege

Audit & compliance

Incident response

Education

Bachelor’s degree in Computer Science or related field

Tools

Workday

SSO/MFA tooling

Job description

Description

Under direction, within the Office of the Chief Information Officer and the Enterprise Information Technology (EIT) program

Under direction, within the Office of the Chief Information Officer and the Enterprise Information Technology (EIT) program, leads and performs enterprise application security administration for the Commission’s Workday ERP environment and related enterprise systems. The position is responsible for designing, configuring, administering, documenting, monitoring, and continuously improving security controls across Workday Human Capital Management, Payroll, Benefits, Finance, Procurement, Planning, Learning, reporting, integrations, and other implemented capabilities.

The incumbent develops and maintains Workday security groups, domain and business process security policies, role assignments, integration system security, service accounts, application programming interface access, and identity-related controls. The position applies least-privilege, role-based access, segregation-of-duties, privacy, audit, and risk-management principles; supports access certifications and control testing; and coordinates security incident response, remediation, and evidence collection.

The incumbent serves as a Workday security subject-matter expert within the EIT operating model and collaborates with functional owners, Information Security, Identity and Access Management, Internal Audit, Human Resources, Finance, Procurement, technical teams, implementation partners, and vendors. Work includes translating business requirements into secure access models, evaluating cross-functional impacts, supporting testing and production migrations, monitoring security changes and Workday releases, and maintaining a controlled, supportable, and auditable security environment.

Work may involve highly confidential or sensitive workforce, payroll, financial, procurement, and security information. Assignments are carried out independently within established policies, governance standards, change-control procedures, and accepted professional practices. The incumbent keeps management informed of status, risks, non-routine issues, and decisions requiring escalation. Work is evaluated for effectiveness, security, compliance, quality, timeliness, customer service, teamwork, documentation, and successful resolution of technical and business-control issues.

Examples of Important Duties

• Administers the Workday security framework, including security groups, domains, business process security policies, role assignments, user-based and role-based groups, segment-based or intersection security, and related tenant security configurations.
• Reviews, validates, provisions, modifies, and deprovisions access requests. Confirms authorization, business need, role alignment, least privilege, segregation of duties, and required approvals before implementing access.
• Administers and monitors privileged access, integration system users, service accounts, API access, and security supporting Workday integrations. Coordinates identity controls such as single sign-on, multifactor authentication, and identity lifecycle processes with appropriate technical teams.
• Performs periodic access reviews and certifications; monitors security group membership, domain access, business process permissions, elevated access, and inactive or transferred users; identifies and remediates inappropriate, excessive, conflicting, or obsolete access.
• Develops and maintains segregation-of-duties rules and compensating controls in coordination with functional owners, Finance, Human Resources, Procurement, Information Security, and Internal Audit.
• Creates and maintains security dashboards, audit reports, exception reports, control evidence, metrics, and documentation supporting operational monitoring, internal control assessments, external audits, privacy reviews, and regulatory or governance requirements.
• Investigates Workday security incidents, access anomalies, control failures, and suspected misuse. Performs root-cause analysis, coordinates containment and remediation, preserves relevant evidence, and recommends preventive improvements in accordance with incident response procedures.
• Maintains comprehensive security procedures and records, including request and approval documentation, provisioning and deprovisioning records, role design, security configuration decisions, test results, migration evidence, access-review results, exceptions, and remediation actions.

EIT Program, Governance, and Continuous Improvement

• Supports the EIT governance model by providing security analysis, recommendations, risk assessments, decision support, and status reporting for Workday and related enterprise initiatives.
• Participates in design reviews, architecture discussions, release planning, prioritization, testing, readiness, and post-production support. Escalates issues affecting security, compliance, scope, schedule, resources, or business operations through established governance channels.
• Coordinates with Workday, the implementation partner, managed-service providers, and other vendors to resolve security issues, validate remediations, obtain documentation, and maintain vendor accountability.
• Maintains current knowledge of Workday security features, semiannual releases, applicable Commission standards, cybersecurity practices, audit expectations, privacy requirements, and public-sector control frameworks. Assesses relevant changes and recommends adoption or remediation actions.
• Develops and delivers security guidance, procedures, knowledge articles, and role-based training for functional teams, support staff, approvers, and other authorized users. Provides technical direction and mentoring to less experienced staff.
• Promotes continuous improvement by analyzing service trends, recurring access issues, audit findings, security exceptions, and stakeholder feedback; recommends automation, standardization, and control enhancements that reduce risk and manual effort.
• Provides backup support for related enterprise application security and identity-access activities, as assigned. Performs other duties as assigned.

Important Worker Characteristics

• Knowledge
• Expert knowledge of enterprise application security administration, identity and access management, role-based access control, least privilege, segregation of duties, privileged access, audit controls, privacy, and security risk management.
• Advanced knowledge of Workday security architecture, including security groups, domains, business process security, role assignments, integration security, service accounts, API access, tenant security, and security reporting.
• Knowledge of Workday HCM, Payroll, Benefits, Finance, Procurement, Planning, Learning, reporting, integrations, and related cross-functional business processes sufficient to assess access and control impacts.
• Knowledge of enterprise change management, release management, testing, migration, incident response, service management, documentation, and project governance practices.
• Knowledge of information technology disciplines such as application architecture, cloud services, integrations, databases, network concepts, identity services, logging, monitoring, quality assurance, and production operations.
• Knowledge of applicable Commission policies and procedures and relevant public-sector security, privacy, audit, records, and regulatory expectations. Knowledge of frameworks such as NIST Cybersecurity Framework is desirable.
• Skills and Abilities
• Configure, analyze, test, document, and troubleshoot complex Workday security and access requirements across multiple functional areas.
• Interpret business requirements, policies, audit findings, and risk information and translate them into secure, practical, and supportable controls.
• Conduct access reviews, security assessments, control testing, root-cause analysis, and remediation; identify subtle risks and recommend proportionate corrective action.
• Use reporting and analytical tools to monitor access, identify anomalies, track metrics, prepare audit evidence, and communicate risk and compliance status.
• Lead or coordinate security workstreams, assign or review technical tasks, mentor staff, facilitate decisions, and work effectively across functional, technical, audit, vendor, and executive stakeholders.
• Communicate complex security and Workday concepts clearly in written and verbal form to technical and nontechnical audiences; obtain agreement, compliance, or timely action when required.
• Exercise discretion, sound judgment, confidentiality, customer service, and attention to detail while managing competing priorities and sensitive information.

Minimum Qualifications

• Bachelor’s Degree in Business Management, Computer Science, Information Systems or any related field.
• Four (4) years of experience in Enterprise Resource Planning Systems or related experience.
• An equivalent combination of education and experience may be substituted, which together total six (8) years.

Preferred Qualifications

• Direct experience configuring and administering Workday security for HCM, Payroll, Financials, Procurement, Benefits, integrations, or related modules.
• Workday Pro, Workday security training, or comparable Workday credentials.
• Experience supporting a large-scale Workday implementation and establishing post-production security governance and operational support.
• Experience with enterprise identity platforms, single sign-on, multifactor authentication, identity governance, service management, security information and event management, or access-review tools.
• Experience in government, public sector, or another regulated environment and familiarity with internal and external audit support.

Supplemental Information

Classification Specification: Corporate System Security Administrator

May be subject to medical, drug and alcohol testing.

Working Conditions

Works primarily in an office or approved remote-work setting. Work is predominantly sedentary and requires light physical effort. Work must be performed accurately and may require occasional overtime, after-hours, weekend, release-window, incident-response, or on-call support. The position may be subject to high work volume, tight deadlines, competing priorities, production incidents, audit requests, and handling of confidential or sensitive information.

The Maryland-National Capital Park and Planning Commission (M-NCPPC) is an Equal Opportunity Employer. We celebrate a workplace culture of diversity, equity and inclusion without discrimination or harassment on the basis of race, color, religion, sex, age, national origin, sexual orientation, marital status, disability, genetic information, gender identity, or any other non-merit factor.

Applicants with Disabilities under the Americans with Disabilities Act.

If you require accommodations or special arrangements due to a qualifying disability, please notify the Recruitment & Selections Services Unit at the time of applications at or 301-454-1411 (Maryland Relay 7-1-1).

M-NCPPC will make all efforts to reasonably accommodate you.

THE MARYLAND-NATIONAL CAPITAL PARK AND PLANNING COMMISSION

2026 Benefit Summary For Merit System Employees

The following benefit summary is provided for informational purposes only and is not, nor should be construed as an employment agreement with the M-NCPPC, implied or actual. It is not all-inclusive and is subject to change. Benefits listed are extended to all Merit System employees of the M-NCPPC. All plans are optional except the Defined Benefit and Long-Term Disability plans.

Eligibility

You have 45 days from your hire date to elect your benefits. Your coverage begins on the first of the month following receipt of your enrollment forms and required documentation.

Retirement Programs

• Defined Benefit Plan (Mandatory Participation) – Plan E excludes FOP members.

Plan

Plan Employee Contribution

• Plan C 9.5%* of base salary (FOP members only)
• Plan E 4% of base salary up to maximum Social Security Wage Base (SSWB) and 8% in excess of SSWB.
• 457 (b) Plan (Optional) [