Lead, Application Consulting - Workday Security

Kyndryl; United States; On-site; USD 92,000 - 175,000; Full time

Benefits offered by this job

Discretionary annual bonus

Medical and dental coverage

Retirement benefits

Paid leave

Paid time off

Job summary

Kyndryl is seeking an Application Consultant - Workday Security to administer security, manage access, and ensure governance across the Workday platform. You will work with HR, Compliance, Internal Audit, and technical teams to deliver secure, compliant solutions for HCM, Recruiting, Talent, and Payroll modules.

The ideal candidate has extensive Workday Security experience, strong collaboration skills, and a customer-focused mindset.

Qualifications

• 5+ years of Workday Security administration and configuration experience.
• Experience configuring Workday Security Groups, Domain Security Policies, and Business Process Security Policies.
• Experience administering access management processes and security operations within Workday.
• Knowledge of Workday HCM and related functional areas.
• Strong analytical, troubleshooting, and problem-solving skills; translate requirements into security solutions.
• Experience supporting audits, compliance activities, or access reviews.

Responsibilities

• Configure, maintain, and support Workday security groups and policies.
• Administer role-based and user-based security configurations.
• Implement security changes that meet business needs while maintaining compliance.
• Maintain Workday security documentation, role inventories, and configuration records.
• Support Workday tenant migrations and security-related deployments.
• Perform security testing and validation for new configurations and enhancements.
• Assist in audits, compliance activities, or access reviews; support governance.
• Collaborate with functional teams to ensure secure and compliant operations.

Skills

Workday Security Administration

Access Management

Segregation of Duties

Security Governance

Security Testing

Cross-functional Collaboration

Tools

Okta

Entra ID

SailPoint

Job description

Who We Are

At Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl? We are always moving forward – always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities.

The Role

Join Kyndryl as an Application Consultant - Workday Security and play a critical role in maintaining the security, integrity, and compliance of our global Workday environment.

In this role, you will be responsible for administering Workday security, supporting access management processes, implementing security changes, troubleshooting security issues, and partnering with functional and technical teams to deliver secure solutions across Workday Human Capital Management (HCM), Recruiting, Talent, Learning, Compensation, Time Tracking, Benefits, Payroll, and other Workday modules.

As a trusted member of the HR Technology organization, you will collaborate with HR, Compliance, Internal Audit, Product Owners, and Identity Management teams to ensure users have appropriate access based on job responsibilities while maintaining compliance with company policies and security governance requirements.

You will support security reviews, segregation-of-duties assessments, audit activities, Workday releases, organizational changes, and transformation initiatives. Through strong analytical and problem-solving skills, you will evaluate business requirements and translate them into secure Workday solutions that balance operational efficiency, data protection, and compliance.

The ideal candidate combines Workday security expertise with strong collaboration, attention to detail, and a customer-focused mindset, ensuring secure and effective business operations across the Workday platform.

Key Responsibilities:

Workday Security Administration

• Configure, maintain, and support Workday security groups, domain security policies, and business process security policies.
• Administer role-based, user-based, constrained, and unconstrained security configurations.
• Implement security changes that support business requirements while maintaining compliance with security standards.
• Maintain Workday security documentation, role inventories, and configuration records.
• Support Workday tenant migrations and security-related deployments between environments.
• Perform security testing and validation activities for new configurations and enhancements.

Access Management & Compliance

• Process, analyze, and fulfill Workday access requests in accordance with established governance standards.
• Conduct periodic access certifications and role reviews to ensure users maintain appropriate access.
• Validate security assignments following organizational changes, transfers, acquisitions, and restructures.
• Support internal and external audit activities by providing security documentation, evidence, and access analysis.
• Assist in identifying and resolving security compliance gaps and control weaknesses.
• Participate in security reviews and governance activities supporting least-privilege access models.

Segregation of Duties (SoD) & Risk Management

• Perform Segregation of Duties (SoD) reviews to identify access conflicts and potential control risks.
• Partner with Compliance, Risk, and Audit teams to evaluate and remediate security findings.
• Assist in developing and documenting mitigation plans for identified access risks.
• Support ongoing monitoring activities to maintain an audit-ready Workday environment.

Integration & Reporting Security

• Configure and support Integration System Users (ISUs), Integration System Security Groups (ISSGs), and related integration security objects.
• Support security configuration for Enterprise Interface Builder (EIB) integrations and Workday reports.
• Review report and integration access to ensure sensitive data is appropriately protected.
• Assist with troubleshooting integration and reporting security issues.

Release & Project Support

• Evaluate security impacts associated with Workday releases, enhancements, and new functionality.
• Participate in system testing, user acceptance testing (UAT), and deployment validation activities.
• Support security requirements associated with Workday projects, acquisitions, and organizational transformations.
• Collaborate with functional teams to ensure security implications are considered throughout project delivery.

Support & Continuous Improvement

• Investigate and resolve Workday security-related incidents and access issues.
• Analyze root causes of security issues and recommend corrective actions.
• Partner with stakeholders to understand business requirements and deliver effective security solutions.
• Identify opportunities to improve security processes, governance controls, and operational efficiency.
• Contribute to process documentation, knowledge sharing, and continuous improvement initiatives.

Kyndryl currently does not require employees to be fully vaccinated against COVID-19, however, if you are hired to work at a client, customer, or partner location, you may be required to show proof of vaccination to align with their respective COVID-19 vaccination policies. Those who believe they are eligible may apply for a medical or religious accommodation prior to the start of employment.

Who You Are

You’re good at what you do and possess the required experience to prove it. However, equally as important – you have a growth mindset; keen to drive your own personal and professional development. You are customer-focused – someone who prioritizes customer success in their work. And finally, you’re open and borderless – naturally inclusive in how you work with others.

Required Skills and Experience:

• 5+ years of Workday Security administration and configuration experience.
• Experience configuring and supporting:
• Workday Security Groups
• Domain Security Policies
• Business Process Security Policies
• Role-Based Security
• User-Based Security
• Integration Security
• Experience administering access management processes and security operations within Workday.
• Knowledge of Workday HCM and related functional areas.
• Experience supporting audits, compliance activities, or access reviews.
• Strong analytical, troubleshooting, and problem-solving skills.
• Ability to gather requirements and translate business needs into security solutions.
• Strong verbal and written communication skills.
• Ability to work effectively with cross-functional teams and business stakeholders.

Preferred Skills and Experience

• Experience supporting Workday Core HCM, Recruiting, Talent & Performance, Learning, Compensation, Benefits, Time Tracking, or Payroll.
• Experience configuring and supporting Workday Security Groups, Domain Security Policies, Business Process Security Policies, and Integration Security.
• Experience supporting user access requests, access reviews, access certifications, and Segregation of Duties (SoD) activities with a focus on security compliance and audit readiness.
• Experience supporting Workday integrations, EIBs, Integration System Users (ISUs), and Integration System Security Groups (ISSGs).
• Familiarity with Identity and Access Management (IAM) solutions such as Okta, Entra ID, SailPoint, or similar platforms.
• Experience supporting audits, compliance reviews, and remediation activities to reduce security risk and strengthen controls.
• Experience supporting Workday releases, testing, and security impact assessments to ensure secure deployment of new functionality.
• Demonstrated ability to troubleshoot and resolve security-related issues while maintaining service levels and a positive end-user experience.
• Workday Security Certification or equivalent Workday Security experience preferred.

Pay and Benefits

• The compensation range for the position in the U.S. is $92,040 to $174,840 based on a full-time schedule. Your actual compensation may vary depending on your geography, job-related skills and experience. For part-time roles, the compensation will be adjusted appropriately. The pay or salary range will not be below any applicable state, city or local minimum wage requirement.
• There is a different applicable compensation range for the following work locations:
• California (San Francisco Bay Area): $110,400 to $209,880
• California (All Other): $101,280 to $192,360
• Colorado: $92,040 to $174,840
• Massachusetts/ Virginia: $92,040 to $192,360
• New York City: $110,400 to $209,880
• Washington: $101,280 to $192,360
• Washington DC: $101,280 to $192,360
• This position will be eligible for Kyndryl’s discretionary annual bonus program, based on performance and subject to the terms of Kyndryl’s applicable plans. You may also receive a comprehensive benefits package which includes medical and dental coverage, disability, retirement benefits, paid leave, and paid time off. Note: If this is a sales commission eligible role, you will be eligible to participate in a sales commission plan in lieu of the annual discretionary bonus program.

Applications will be accepted on a rolling basis.

Being You

Diversity is a whole lot more than what we look like or where we come from, it’s how we think and who we are. We welcome people of all cultures, backgrounds, and experiences. But we’re not doing it single-handily: Our Kyndryl Inclusion Networks are only one of many ways we create a workplace where all Kyndryls can find and provide support and advice. This dedication to welcoming everyone into our company means that Kyndryl gives you – and everyone next to you – the ability to bring your whole self to work, individually and collectively, and support the activation of our equitable culture. That’s the Kyndryl Way.

What You Can Expect

With state-of-the‑art resources and Fortune 100 clients, every day is an opportunity to innovate, build new capabilities, new relationships, new processes, and new value. Kyndryl cares about your well‑being and prides itself on offering benefits that give you choice, reflect the diversity of our employees and support you and your family through the moments that matter – wherever you are in your life journey. Our employee learningprograms give you access to the best learning in the industry to receive certifications, includingMicrosoft, Google, Amazon, Skillsoft, and many more. Through our company-wide volunteering and giving platform, you can donate, start fundraisers, volunteer, and search over 2 million non‑profit organizations. At Kyndryl, we invest heavily in you, we want you to succeed so that together, we will all succeed.

Get Referred!
If you know someone that works at Kyndryl, when asked ‘How Did You Hear About Us’ during the application process, select ‘Employee Referral’ and enter your contact's Kyndryl email address.