Senior Workday Security Engineer

CVS Health

. Design, configure, and maintain Workday security groups, roles, domains, and business process security policies .

Posted 11/10/2026full-timeUnited StatesSenior💰 $83,430 - $222,480 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Workday security configuration and management, including role-based and domain security policies, while ensuring compliance with audit and risk requirements. Proficient in troubleshooting access issues and maintaining comprehensive documentation to support operational efficiency.

Highest-signal resume keywords

Workday Security ConfigurationHCM Security SupportIntegration Security ManagementServiceNow ExperienceWorkday Pro Security Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Workday Security GroupsRole-Based SecurityDomain Security PoliciesBusiness Process SecurityData Source AnalysisIntegration DomainsAudit Evidence ProductionSegregation-Of-Duties AnalysisTechnical DocumentationAgile Methodologies

Soft Skills

Analytical SkillsTroubleshooting SkillsDocumentation SkillsStakeholder Communication

Tools & Technologies

ServiceNowJiraWorkday ReportingSecurity Administration HubPrism

Certifications & Qualifications

Workday Pro Security Certification

Industry Keywords

SOX ControlsPrivacy RequirementsData ClassificationPrivileged-Access GovernanceHealthcare Industry Experience

Tech Stack

Tools & technologies

Cyber SecurityServiceNow

About the role

Key responsibilities & impact

Design, configure, and maintain Workday security groups, roles, domains, and business process security policies
Support security requirements across HCM, Compensation, Benefits, Payroll, Talent, Recruiting, and Reporting
Troubleshoot complex access issues, perform root-cause analysis, and deliver remediation recommendations
Manage Workday security access requests and approvals through ServiceNow with complete documentation and traceability
Apply least-privilege and segregation-of-duties principles; support periodic access reviews and remediation
Analyze custom-report sharing, data sources, and field-level domains to prevent inappropriate data exposure
Support audit, risk, privacy, and compliance activities by producing evidence and maintaining control documentation
Maintain SOPs, runbooks, knowledge articles, role matrices, security inventories, and change records
Track operational metrics, ticket volumes, SLA performance, backlog trends, and recurring access issues
Support Workday release impact assessments, sandbox-first testing, migrations, and controlled production deployment
Contribute to security re-architecture, role redesign, security standardization, and continuous-improvement initiatives
Cross-train team members and build reusable documentation
Design technical architecture and infrastructure for digital solutions
Write code, develop software components, and implement complex functionalities
Integrate software components and systems
Write and execute test cases, conduct code reviews, debug, and troubleshoot issues
Participate in agile or other development methodologies, project planning, and meetings
Explore tools, frameworks, and techniques to improve digital solutions
Create technical documentation, including system designs, architecture diagrams, and code documentation
Share knowledge and expertise with team members to support knowledge transfer and collaboration

Requirements

What you’ll need

5+ years of experience with Workday
3+ years of experience focused on Workday configurable security
3+ years of hands-on experience with role-based, user-based, job-based, rule-based, intersection, aggregation, and segment-based security groups
3+ years of experience with domain security policies, business process security policies, role assignments, and organization constraints
3+ years of experience supporting HCM and Compensation security in a complex enterprise environment
3+ years of experience with Workday report security, including data-source and field-level domain analysis
3+ years of experience with integration security, including ISUs, ISSGs, integration domains, and EIB security
2+ years of experience supporting access reviews, audit evidence, segregation-of-duties analysis, and security controls
2+ years of experience using ServiceNow, Jira, or comparable work-management platforms
2+ years demonstrating strong analytical, troubleshooting, documentation, and stakeholder-communication skills
Bachelor's degree in Information Systems, Computer Science, Human Resources Technology, Cybersecurity, or a related field, or equivalent relevant experience
Workday Pro Security certification preferred
Experience supporting a large, highly regulated enterprise Workday environment preferred
Knowledge of SOX controls, privacy requirements, data classification, and privileged-access governance preferred
Experience with Workday Reporting, Security Administration Hub, Prism, integrations, and release-management practices preferred
Healthcare industry experience preferred

Benefits

Comp & perks

CVS Health bonus, commission or short-term incentive program in addition to base pay
Medical coverage
Dental coverage
Vision coverage
Paid time off
Retirement savings options
Wellness programs
Other resources supporting physical, emotional, and financial well-being