Senior Workday Security Architect

CVS Health; Jefferson City (MO); On-site; USD 83,000 - 222,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

Retirement plan

Paid time off

Job summary

CVS Health is seeking an experienced Senior Workday Security Engineer to join the HR Technology Workday Security team. This role designs, supports, governs, and optimizes security across the Workday platform, with a primary focus on HCM, Compensation, Reporting, and Access Management.

The role partners with HR, Compensation, Payroll, Talent Acquisition, Reporting, and HR Technology teams to protect sensitive workforce data, apply least-privilege access, improve operational controls, and support

Qualifications

• 5+ years of experience with Workday.
• 3+ years of experience focused on Workday configurable security.
• 3+ years of hands‑on experience with various security group models (RBAC, UBG, job-based, rule-based).
• 3+ years with domain security policies, business process security, role assignments, and org constraints.
• 3+ years supporting HCM and Compensation security in a complex enterprise.
• 3+ years with Workday report security, including data-source and field-level domain analysis.
• 3+ years with integration security (ISUs, ISSGs, EIB security).
• 2+ years supporting access reviews, audit evidence, segregation-of-duties analysis, and security controls.
• 2+ years using ServiceNow, Jira, or comparable work-management platforms.
• 2+ years analytical, troubleshooting, documentation, and stakeholder-communication skills.

Responsibilities

• Design, configure, and maintain Workday security groups, roles, domains, and security policies.
• Support security requirements across HCM, Compensation, Benefits, Payroll, Talent, Reporting.
• Troubleshoot access issues, perform root-cause analysis, and deliver remediation recommendations.
• Manage Workday security access requests and approvals through ServiceNow with documentation.
• Apply least-privilege and segregation-of-duties; support access reviews and remediation.
• Analyze custom-report sharing, data sources, and field-level domains to prevent data exposure.
• Support audit, risk, privacy, and compliance activities with evidence and control documentation.
• Own and maintain SOPs, runbooks, knowledge articles, role matrices, and security inventories.
• Track operational metrics, ticket volumes, SLA performance, backlog trends.
• Support Workday release impact assessments, sandbox testing, migrations, and controlled deployments.
• Contribute to security re-architecture, role redesign, and continuous-improvement initiatives.
• Cross-train team members and build reusable documentation.
• Design and define the technical architecture for digital solutions.
• Write code, develop software components, and implement complex functionalities.
• Integrate various software components ensuring interoperability.
• Write and execute test cases, perform code reviews, and troubleshoot issues.
• Participate in agile development and project planning.
• Explore new tools/frameworks to improve digital solutions.
• Create and maintain technical documentation and knowledge transfer.

Skills

Workday

Workday security

ServiceNow

Jira

Access management

Audit & compliance

Data privacy

Root-cause analysis

Documentation

Stakeholder comms

SOX knowledge

Education

Bachelor's degree in IS/CS/HR Tech/Cybersecurity or related field

Tools

ServiceNow

Jira

Job description

CVS Health is seeking an experienced Senior Workday Security Engineer to join the HR Technology Workday Security team. This role designs, supports, governs, and optimizes security across the Workday platform, with a primary focus on HCM, Compensation, Reporting, and Access Management.

The role partners with HR, Compensation, Payroll, Talent Acquisition, Reporting, and HR Technology teams to protect sensitive workforce data, apply least-privilege access, improve operational controls, and support