Workday Security Architect / Administrator

This is a remote position.

• Employment Type: Contract
  
• Work Mode: Remote
  
• Location: Offshore
  
• Total Experience Required: 5 to 8 years
  
• Relevant Experience Required: 4+ years of dedicated experience designing, configuring, and auditing Workday data and application security structures
  
• Mandatory Certification: Workday Certified Core HCM along with demonstrable advanced security administration training records
  

• Design, build, and maintain the global Workday security architecture, configuring Domain Security Policies (DSPs) and Business Process Security Policies (BPSPs) to manage field-level and action-level access.
  
• Configure diverse security group models, establishing Role-Based, User-Based, Job-Based, Intersection, and Segment-Based security permissions tailored to corporate organizational lines.
  
• Orchestrate cross-functional data segregation bounds, isolating highly confidential executive compensation tables, employee health insurance structures, and sensitive regional ledgers.
  
• Enforce data masking and data privacy policies, scrambling personally identifiable information (PII) within developer sandboxes and defining strict visibility rules across production environments.
  
• Execute mass security profile overrides via Enterprise Interface Builders (EIBs), auditing user permission provisioning pipelines, and leading security group re-alignments during corporate structural expansions.
  
• Lead internal platform security audits and compliance tracking, utilizing the Security Exception Audit, Change Log reports, and tracking matrixes to maintain alignment with internal controls, SOC, and GDPR mandates.
  
• Govern administrative access updates during biannual Workday platform releases, running regression test checks in sandboxes to analyze the security impacts of newly activated platform features.
  

Requirements

• 5 to 8 years of core enterprise data security or system access governance experience, with 4+ dedicated years actively designing, building, and maintaining multi-tenant security layers explicitly on the Workday cloud platform.
  
• Strong technical mastery of Workday Functional Areas, configurable security frameworks, conditional logic rules, and complex user authorization parameters.
  
• Deep structural understanding of segregation of duties (SoD) frameworks, regional data residency compliance boundaries, identity federation concepts (SAML/SSO), and access logging.
  
• Mandatory certification: Workday Certified Core Human Capital Management.
  

• Workday Certified Advanced Reporting or Workday Certified Financials Core certification.
  
• Prior consulting experience managing global security redesign tracks for multi-entity enterprise operations undergoing active cloud migrations or business unit uncouplings.