Lead, Application Consulting - Workday Security

1000 Kyndryl, Inc.; Georgia; On-site; USD 110,000 - 140,000; Full time

Job summary

Join Kyndryl as an Application Consultant - Workday Security to administer security, support access management, and ensure compliance across the Workday HCM suite and related modules. Collaborate with HR, Compliance, Internal Audit, and Identity Management to maintain least-privilege access and audit readiness.

You will lead security reviews, SoD assessments, and deployments while translating business needs into secure Workday solutions with a customer-focused mindset.

Qualifications

• 5+ years of Workday Security administration and configuration experience.
• Experience configuring Workday Security Groups, Domain Security Policies, Business Process Security Policies.
• Experience supporting audits, compliance activities, or access reviews.
• Knowledge of Workday HCM and related functional areas.
• Strong analytical, troubleshooting, and problem-solving skills.

Responsibilities

• Workday Security Administration: configure and support security groups and policies.
• Administer role-based, user-based, constrained security configurations.
• Implement security changes while maintaining compliance with standards.
• Maintain Workday security documentation and inventories.
• Support tenant migrations and security-related deployments.
• Perform security testing and validation for configurations.
• Analyze access requests and conduct periodic access certifications.
• Collaborate with HR, Compliance, and IT teams on security governance.
• Support SoD reviews and remediation of security findings.
• Configure and support ISUs/ISSGs and related security objects.
• Assist with security during Workday releases and project deployments.
• Investigate and resolve security incidents and improve processes.

Skills

Workday security administration

Access management

Security troubleshooting

Security governance

Analytical thinking

Cross-functional collaboration

Communication skills

Tools

Okta

Entra ID

SailPoint

Job description

Who We Are At Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl? We are always moving forward – always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities.

The Role

Join Kyndryl as an Application Consultant - Workday Security and play a critical role in maintaining the security, integrity, and compliance of our global Workday environment. In this role, you will be responsible for administering Workday security, supporting access management processes, implementing security changes, troubleshooting security issues, and partnering with functional and technical teams to deliver secure solutions across Workday Human Capital Management (HCM), Recruiting, Talent, Learning, Compensation, Time Tracking, Benefits, Payroll, and other Workday modules. As a trusted member of the HR Technology organization, you will collaborate with HR, Compliance, Internal Audit, Product Owners, and Identity Management teams to ensure users have appropriate access based on job responsibilities while maintaining compliance with company policies and security governance requirements. You will support security reviews, segregation-of-duties assessments, audit activities, Workday releases, organizational changes, and transformation initiatives.

Through strong analytical and problem-solving skills, you will evaluate business requirements and translate them into secure Workday solutions that balance operational efficiency, data protection, and compliance. The ideal candidate combines Workday security expertise with strong collaboration, attention to detail, and a customer-focused mindset, ensuring secure and effective business operations across the Workday platform.

Key Responsibilities

• Workday Security Administration Configure, maintain, and support Workday security groups, domain security policies, and business process security policies.
• Administer role-based, user-based, constrained, and unconstrained security configurations.
• Implement security changes that support business requirements while maintaining compliance with security standards.
• Maintain Workday security documentation, role inventories, and configuration records.
• Support Workday tenant migrations and security-related deployments between environments.
• Perform security testing and validation activities for new configurations and enhancements.

Access Management & Compliance Process

• Analyze, and fulfill Workday access requests in accordance with established governance standards.
• Conduct periodic access certifications and role reviews to ensure users maintain appropriate access.
• Validate security assignments following organizational changes, transfers, acquisitions, and restructures.
• Support internal and external audit activities by providing security documentation, evidence, and access analysis.
• Assist in identifying and resolving security compliance gaps and control weaknesses.
• Participate in security reviews and governance activities supporting least-privilege access models.

Segregation of Duties (SoD) & Risk Management

• Perform Segregation of Duties (SoD) reviews to identify access conflicts and potential control risks.
• Partner with Compliance, Risk, and Audit teams to evaluate and remediate security findings.
• Assist in developing and documenting mitigation plans for identified access risks.
• Support ongoing monitoring activities to maintain an audit-ready Workday environment.

Integration & Reporting Security

• Configure and support Integration System Users (ISUs), Integration System Security Groups (ISSGs), and related integration security objects.
• Support security configuration for Enterprise Interface Builder (EIB) integrations and Workday reports.
• Review report and integration access to ensure sensitive data is appropriately protected.
• Assist with troubleshooting integration and reporting security issues.

Release & Project Support

• Evaluate security impacts associated with Workday releases, enhancements, and new functionality.
• Participate in system testing, user acceptance testing (UAT), and deployment validation activities.
• Support security requirements associated with Workday projects, acquisitions, and organizational transformations.
• Collaborate with functional teams to ensure security implications are considered throughout project delivery.

Support & Continuous Improvement

• Investigate and resolve Workday security-related incidents and access issues.
• Analyze root causes of security issues and recommend corrective actions.
• Partner with stakeholders to understand business requirements and deliver effective security solutions.
• Identify opportunities to improve security processes, governance controls, and operational efficiency.
• Contribute to process documentation, knowledge sharing, and continuous improvement initiatives.

Who You Are

You’re good at what you do and possess the required experience to prove it. However, equally as important – you have a growth mindset; keen to drive your own personal and professional development. You are customer-focused – someone who prioritizes customer success in their work. And finally, you’re open and borderless – naturally inclusive in how you work with others.

Required Skills and Experience

• 5+ years of Workday Security administration and configuration experience.
• Experience configuring and supporting: Workday Security Groups Domain Security Policies Business Process Security Policies Role-Based Security User-Based Security Integration Security Experience administering access management processes and security operations within Workday.
• Knowledge of Workday HCM and related functional areas.
• Experience supporting audits, compliance activities, or access reviews.
• Strong analytical, troubleshooting, and problem-solving skills.
• Ability to gather requirements and translate business needs into security solutions.
• Strong verbal and written communication skills.
• Ability to work effectively with cross-functional teams and business stakeholders.

Preferred Skills and Experience

• Experience supporting Workday Core HCM, Recruiting, Talent & Performance, Learning, Compensation, Benefits, Time Tracking, or Payroll.
• Experience configuring and supporting Workday Security Groups, Domain Security Policies, Business Process Security Policies, and Integration Security.
• Experience supporting user access requests, access reviews, access certifications, and Segregation of Duties (SoD) activities with a focus on security compliance and audit readiness.
• Experience supporting Workday integrations, EIBs, Integration System Users (ISUs), and Integration System Security Groups (ISSGs).
• Familiarity with Identity and Access Management (IAM) solutions such as Okta, Entra ID, SailPoint, or similar platforms.
• Experience supporting audits, compliance reviews, and remediation activities to reduce security risk and strengthen controls.
• Experience supporting Workday releases, testing, and security impact assessments to ensure secure deployment of new functionality.