Senior Workday Security Architect

CVS Health; Boston (MA); On-site; USD 83,000 - 222,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision coverage

Paid time off

Retirement savings

Job summary

CVS Health is seeking a Senior Workday Security Engineer to join the HR Technology Workday Security team. This role designs, supports, governs, and optimizes security across the Workday platform, focusing on HCM, Compensation, Reporting, and Access Management.

The role partners with HR, Compensation, Payroll, Talent Acquisition, and Reporting to protect sensitive workforce data, apply least-privilege access, and support security modernization.

Qualifications

• 5+ years of experience with Workday.
• 3+ years of experience focused on Workday configurable security.
• 3+ years of hands-on experience with various Workday security groups.
• 3+ years of experience with domain security policies, business process security, and role assignments.
• 2+ years of experience supporting access reviews, audit evidence, and segregation-of-duties analysis.

Responsibilities

• Design, configure, and maintain Workday security groups, roles, domains, and policy.
• Support security requirements across multiple Workday domains (HCM, Compensation, Benefits, Payroll).
• Manage security access requests and approvals through ServiceNow with documentation and traceability.
• Apply least-privilege and segregation-of-duties; support access reviews.
• Contribute to security re-architecture and role redesign initiatives.

Skills

Workday

Security engineering

Access governance

ServiceNow

Jira

Security policies

Education

Bachelor's degree in Information Systems, Computer Science, HR Technology, Cybersecurity, or related field

Tools

ServiceNow

Jira

RBAC

Security tooling

Job description

CVS Health is seeking a Senior Workday Security Engineer to join the HR Technology Workday Security team. This role designs, supports, governs, and optimizes security across the Workday platform, focusing on HCM, Compensation, Reporting, and Access Management.

The role partners with HR, Compensation, Payroll, Talent Acquisition, and Reporting to protect sensitive workforce data, apply least-privilege access, and support security modernization.