Summary
Supports day-to-day administration, maintenance, documentation, testing, and governance of security within Workday. The role completes approved security changes, supports access requests, assists with troubleshooting, and helps maintain a secure and well-controlled Workday environment.
Works with the Workday team, functional owners, Enterprise Technology, and other stakeholders to support role-based access, security groups, domain and business process security, access reviews, testing, and security documentation. Complex security design decisions are escalated to senior resources.
Duties and Functions
• Process approved Workday security and access requests in accordance with established approvals and change controls.
• Create and maintain authorized Workday security group and role assignments.
• Support domain security policies and business process security policies using established standards and senior guidance.
• Troubleshoot routine user-access issues involving roles, security groups, domain security, business process security, and organizational assignments.
• Support joiner, mover, and leaver access activities.
• Perform security testing in non-production tenants and document results before promotion.
• Assist with periodic access reviews and document excessive, outdated, conflicting, or inappropriate access for remediation.
• Maintain security inventories, configuration notes, test evidence, procedures, and audit support documentation.
• Apply least-privilege, segregation-of-duties, privacy, and access-governance principles.
• Support Workday releases, configuration changes, regression testing, and production validation.
• Partner with Workday functional analysts and business process owners to implement approved access requirements.
• Provide security evidence for internal controls, compliance reviews, and audits.
• Triage security incidents and access issues, resolve routine items, and escalate complex or high-risk issues.
Education and Experience
Bachelor's degree in Information Systems, Cybersecurity, HRIS, Business, or a related field preferred; equivalent relevant experience may be considered.
Experience supporting enterprise applications, identity/access administration, HRIS, ERP, or related technology preferred.
Prior Workday administration or Workday security experience strongly preferred.
Preferred Requirements
• 1-3 years of experience in Workday, HRIS/ERP administration, application security, identity and access management, or a related support function.
• Working knowledge of Workday security groups, roles, domain security policies, business process security policies, and organization-based assignments.
• Understanding of role-based access control, least privilege, segregation of duties, access governance, and change management.
• Experience investigating access issues and documenting root cause and resolution.
• Experience with ticketing or work-management systems and structured approval workflows.
• Experience with Azure DevOps (ADO) Boards, work items, documentation, or change tracking is preferred.
• Ability to create clear security documentation, test scripts, evidence, and support procedures.
• Workday security training or certification preferred but not required.
Knowledge/Skills/Abilities (KSA)
• Knowledge of access-control principles including least privilege, role-based access, segregation of duties, and protection of sensitive data.
• Knowledge of Workday security concepts and how assignments affect access to domains, business processes, reports, and functional activities.
• Skill in methodical troubleshooting and documentation of access issues.
• Skill in controlled change execution, accurate recordkeeping, and validation testing.
• Ability to communicate with functional and technical stakeholders and appropriately escalate risks or design questions.
• Ability to handle sensitive access and security information responsibly and confidentially.
Supervisory Responsibilities
This position…