Design and maintain global Workday security architecture, including security policies, access groups, data segregation, and privacy controls. Lead security audits and compliance tracking, manage access provisioning and structural changes, and assess security impacts during platform releases.
This is a remote position.
Workday Security Architect / Administrator
Job Details
Employment Type: Contract
Work Mode: Remote
Location: Offshore
Total Experience Required: 5 to 8 years
Relevant Experience Required: 4+ years of dedicated experience designing, configuring, and auditing Workday data and application security structures
Mandatory Certification: Workday Certified Core HCM along with demonstrable advanced security administration training records
Job Summary
We are seeking an experienced Workday Security Architect / Administrator to design, secure, and govern our global enterprise platform access models. The ideal candidate will orchestrate complex data access boundaries, map intersection security layers, configure strict data-masking policies, and establish rigorous audit compliance metrics to safeguard sensitive employee and financial records across multiple operational regions.
Key Responsibilities
Design, build, and maintain the global Workday security architecture, configuring Domain Security Policies (DSPs) and Business Process Security Policies (BPSPs) to manage field-level and action-level access.
Configure diverse security group models, establishing Role-Based, User-Based, Job-Based, Intersection, and Segment-Based security permissions tailored to corporate organizational lines.
Orchestrate cross-functional data segregation bounds, isolating highly confidential executive compensation tables, employee health insurance structures, and sensitive regional ledgers.
Enforce data masking and data privacy policies, scrambling personally identifiable information (PII) within developer sandboxes and defining strict visibility rules across production environments.
Execute mass security profile overrides via Enterprise Interface Builders (EIBs), auditing user permission provisioning pipelines, and leading security group re-alignments during corporate structural expansions.
Lead internal platform security audits and compliance tracking, utilizing the Security Exception Audit, Change Log reports, and tracking matrixes to maintain alignment with internal controls, SOC, and GDPR mandates.
Govern administrative access updates during biannual Workday platform releases, running regression test checks in sandboxes to analyze the security impacts of newly activated platform features.
Requirements
5 to 8 years of core enterprise data security or system access governance experience, with 4+ dedicated years actively designing, building, and maintaining multi-tenant security layers explicitly on the Workday cloud platform.
Strong technical mastery of Workday Functional Areas, configurable security frameworks, conditional logic rules, and complex user authorization parameters.
Deep structural understanding of segregation of duties (SoD) frameworks, regional data residency compliance boundaries, identity federation concepts (SAML/SSO), and access logging.
Mandatory certification: Workday Certified Core Human Capital Management.
Preferred Qualifications
Workday Certified Advanced Reporting or Workday Certified Financials Core certification.
Prior consulting experience managing global security redesign tracks for multi-entity enterprise operations undergoing active cloud migrations or business unit uncouplings.
“I was the first applicant for a remote marketing position that got listed on the company website the same day I applied. Had an interview within 48 hours!”