Workday Security Architect / Administrator

This is a remote position.

Workday Security Architect / Administrator

Job Details

• Employment Type: Contract
• Work Mode: Remote
• Location: Offshore
• Total Experience Required: 5 to 8 years
• Relevant Experience Required: 4+ years of dedicated experience designing, configuring, and auditing Workday data and application security structures
• Mandatory Certification: Workday Certified Core HCM along with demonstrable advanced security administration training records

Job Summary

We are seeking an experienced Workday Security Architect / Administrator to design, secure, and govern our global enterprise platform access models. The ideal candidate will orchestrate complex data access boundaries, map intersection security layers, configure strict data-masking policies, and establish rigorous audit compliance metrics to safeguard sensitive employee and financial records across multiple operational regions.

Key Responsibilities

• Design, build, and maintain the global Workday security architecture, configuring Domain Security Policies (DSPs) and Business Process Security Policies (BPSPs) to manage field-level and action-level access.
• Configure diverse security group models, establishing Role-Based, User-Based, Job-Based, Intersection, and Segment-Based security permissions tailored to corporate organizational lines.
• Orchestrate cross-functional data segregation bounds, isolating highly confidential executive compensation tables, employee health insurance structures, and sensitive regional ledgers.
• Enforce data masking and data privacy policies, scrambling personally identifiable information (PII) within developer sandboxes and defining strict visibility rules across production environments.
• Execute mass security profile overrides via Enterprise Interface Builders (EIBs), auditing user permission provisioning pipelines, and leading security group re-alignments during corporate structural expansions.
• Lead internal platform security audits and compliance tracking, utilizing the Security Exception Audit, Change Log reports, and tracking matrixes to maintain alignment with internal controls, SOC, and GDPR mandates.
• Govern administrative access updates during biannual Workday platform releases, running regression test checks in sandboxes to analyze the security impacts of newly activated platform features.

Requirements

• 5 to 8 years of core enterprise data security or system access governance experience, with 4+ dedicated years actively designing, building, and maintaining multi-tenant security layers explicitly on the Workday cloud platform.
• Strong technical mastery of Workday Functional Areas, configurable security frameworks, conditional logic rules, and complex user authorization parameters.
• Deep structural understanding of segregation of duties (SoD) frameworks, regional data residency compliance boundaries, identity federation concepts (SAML/SSO), and access logging.
• Mandatory certification: Workday Certified Core Human Capital Management.

Preferred Qualifications

• Workday Certified Advanced Reporting or Workday Certified Financials Core certification.
• Prior consulting experience managing global security redesign tracks for multi-entity enterprise operations undergoing active cloud migrations or business unit uncouplings.