Senior Workday Security Engineer — HCM & Access Governance

CVS Health; Trenton (NJ); On-site; USD 83,000 - 222,000; Full time

Benefits offered by this job

Medical, dental, vision coverage

Retirement savings options

Paid time off

Job summary

CVS Health is seeking an experienced Senior Workday Security Engineer to join the HR Technology Workday Security team. This role focuses on securing Workday across HCM, Compensation, Reporting and Access Management, partnering with HR and IT teams to protect sensitive workforce data.

Responsibilities include configuring security groups, performing root-cause analysis, and supporting security modernization. Strong communication and documentation skills are essential in a complex enterprise

Qualifications

• 5+ years of experience with Workday.
• 3+ years of experience focused on Workday configurable security.
• 3+ years of hands-on experience with various security group models (RBAC, UBG, domain security).
• 3+ years of experience with domain security policies, business process security, role assignments, and org constraints.
• 3+ years of experience supporting HCM and Compensation security.
• 3+ years of experience with Workday report security and data-source analysis.
• 3+ years of experience with integration security (ISUs, ISSGs, EIB security).
• 2+ years of experience supporting access reviews, audit evidence, and segregation‑of‑duties analysis.
• 2+ years using ServiceNow, Jira, or similar platforms.

Responsibilities

• Design, configure, and maintain Workday security groups, roles, domains, and security policies.
• Support security requirements across HCM, Compensation, Benefits, Payroll, Talent, and Reporting.
• Troubleshoot access issues, perform root-cause analysis, and provide remediation recommendations.
• Manage Workday security access requests and approvals through ServiceNow with documentation.
• Apply least-privilege and segregation-of-duties principles; support access reviews.
• Analyze report sharing, data sources, and field-level domains to prevent data exposure.
• Support audit, risk, privacy, and compliance activities with evidence and control docs.
• Own SOPs, runbooks, and security inventories; maintain change records.
• Track metrics, SLA performance, backlog trends, and recurring access issues.
• Support Workday release impact assessments, sandbox testing, migrations, and production deployment.
• Contribute to security re-architecture and role redesign initiatives.
• Cross-train team members and create reusable docs for knowledge transfer.
• Define architecture for digital solutions and integrate components.
• Write code and implement functionality per project requirements.
• Develop tests, review code, debug, and ensure reliability of solutions.
• Participate in agile development and project planning.
• Explore new tools/frameworks to improve solutions.
• Create technical documentation and share knowledge with the team.

Skills

Workday security

Security governance

Analytical skills

Stakeholder comms

Troubleshooting

Education

Bachelor's degree in IS/CS/HR Tech/Cybersecurity or related field

Tools

ServiceNow

Jira

Workday RBAC

Job description

CVS Health is seeking an experienced Senior Workday Security Engineer to join the HR Technology Workday Security team. This role focuses on securing Workday across HCM, Compensation, Reporting and Access Management, partnering with HR and IT teams to protect sensitive workforce data.

Responsibilities include configuring security groups, performing root-cause analysis, and supporting security modernization. Strong communication and documentation skills are essential in a complex enterprise