Senior Workday Security Architect (HCM & Access)

CVS Health; Charleston (WV); Presencial; USD 83.000 - 222.000; Jornada completa

Descripción de la vacante

CVS Health is seeking a Senior Workday Security Engineer to join the HR Technology Workday Security team. You’ll design, govern, and optimize Workday security across HCM, Compensation, Reporting, and access management.

You will collaborate with HR, Payroll, Talent Acquisition, and Reporting teams to protect sensitive workforce data, enforce least-privilege access, and support security modernization initiatives.

Formación

• 5+ years of experience with Workday.
• 3+ years focused on Workday configurable security.
• 3+ years of hands‑on experience with role‑based, user‑based, job‑based, rule‑based, intersection, aggregation, and segment‑based security groups.
• 3+ years of experience with domain security policies, business process security policies, role assignments, and organization constraints.
• 3+ years of experience supporting HCM and Compensation security in a complex enterprise environment.
• 3+ years of experience with Workday report security, including data‑source and field‑level domain analysis.
• 3+ years of experience with integration security, including Integration System Users (ISUs), Integration System Security Groups (ISSGs), integration domains, and EIB security.
• 2+ years of experience supporting access reviews, audit evidence, segregation‑of‑duties analysis, and security controls.
• 2+ years of experience using ServiceNow, Jira, or comparable work‑management platforms.
• 2+ years demonstrating strong analytical, troubleshooting, documentation, and stakeholder‑communication skills.

Responsabilidades

• Design, configure, and maintain Workday security groups, roles, domains, and business process security policies.
• Support security requirements across HCM, Compensation, Benefits, Payroll, Talent, Recruiting, and Reporting.
• Troubleshoot complex access issues, perform root-cause analysis, and deliver clear remediation recommendations.
• Manage Workday security access requests and approvals through ServiceNow, with complete documentation and traceability.
• Apply least-privilege and segregation-of-duties principles; support periodic access reviews and remediation.
• Analyze custom-report sharing, data sources, and field-level domains to prevent inappropriate data exposure.
• Support audit, risk, privacy, and compliance activities by producing accurate evidence and maintaining control documentation.
• Own and maintain SOPs, runbooks, knowledge articles, role matrices, security inventories, and change records.
• Track operational metrics, ticket volumes, SLA performance, backlog trends, and recurring access issues.
• Support Workday release impact assessments, sandbox-first testing, migrations, and controlled production deployment.
• Contribute to security re-architecture, role redesign, security standardization, and continuous-improvement initiatives.
• Cross train team members and build reusable documentation to reduce key-person dependency.
• Design and define the technical architecture and infrastructure required for digital solutions.
• Write code, develop software components, and implement complex functionalities according to project requirements.
• Integrate various software components or systems, ensuring seamless communication and interoperability between different parts of the digital solution.
• Write and execute comprehensive test cases, conduct code reviews, perform debugging, and troubleshoot issues to ensure the reliability, stability, and high quality of digital solutions.
• Participate in agile or other development methodologies, attend meetings, contribute to project planning, and help drive the progress and success of digital projects.
• Explore new tools, frameworks, and techniques to improve digital solutions and drive innovation within the development team.
• Create and maintain technical documentation, including system designs, architecture diagrams, code documentation, and other relevant documentation while sharing their knowledge and expertise with team members, ensuring effective knowledge transfer and collaboration.

Conocimientos

Workday security

Security engineering

Access governance

RBAC/ABAC concepts

Stakeholder communication

Data privacy

Educación

Bachelor's degree in Information Systems, Computer Science, HR Technology, Cybersecurity, or related field

Herramientas

ServiceNow

Jira

Descripción del empleo

CVS Health is seeking a Senior Workday Security Engineer to join the HR Technology Workday Security team. You’ll design, govern, and optimize Workday security across HCM, Compensation, Reporting, and access management.

You will collaborate with HR, Payroll, Talent Acquisition, and Reporting teams to protect sensitive workforce data, enforce least-privilege access, and support security modernization initiatives.