Senior Workday Security Engineer

CVS Health is seeking an experienced Senior Workday Security Engineer to join the HR Technology Workday Security team. This role designs, supports, governs, and optimizes security across the Workday platform, with a primary focus on HCM, Compensation, Reporting, and Access Management.

The role partners with HR, Compensation, Payroll, Talent Acquisition, Reporting, and HR Technology teams to protect sensitive workforce data, apply least-privilege access, improve operational controls, and support security modernization.

Key Responsibilities:

• Design, configure, and maintain Workday security groups, roles, domains, and business process security policies.
• Support security requirements across HCM, Compensation, Benefits, Payroll, Talent, Recruiting, and Reporting.
• Troubleshoot complex access issues, perform root-cause analysis, and deliver clear remediation recommendations.
• Manage Workday security access requests and approvals through ServiceNow, with complete documentation and traceability.
• Apply least-privilege and segregation-of-duties principles; support periodic access reviews and remediation.
• Analyze custom-report sharing, data sources, and field-level domains to prevent inappropriate data exposure.
• Support audit, risk, privacy, and compliance activities by producing accurate evidence and maintaining control documentation.
• Own and maintain SOPs, runbooks, knowledge articles, role matrices, security inventories, and change records.
• Track operational metrics, ticket volumes, SLA performance, backlog trends, and recurring access issues.
• Support Workday release impact assessments, sandbox-first testing, migrations, and controlled production deployment.
• Contribute to security re-architecture, role redesign, security standardization, and continuous-improvement initiatives.
• Cross train team members and build reusable documentation to reduce key-person dependency.
• Design and define the technical architecture and infrastructure required for digital solutions.
• Write code, develop software components, and implement complex functionalities according to project requirements.
• Integrate various software components or systems, ensuring seamless communication and interoperability between different parts of the digital solution.
• Write and execute comprehensive test cases, conduct code reviews, perform debugging, and troubleshoot issues to ensure the reliability, stability, and high quality of digital solutions.
• Participate in agile or other development methodologies, attend meetings, contribute to project planning, and help drive the progress and success of digital projects.
• Explore new tools, frameworks, and techniques to improve digital solutions and drive innovation within the development team.
• Create and maintain technical documentation, including system designs, architecture diagrams, code documentation, and other relevant documentation while sharing their knowledge and expertise with team members, ensuring effective knowledge transfer and collaboration.

Required Qualifications:

• 5+ years of experience with Workday.
• 3+ years of experience focused on Workday configurable security.
• 3+ years of hands-on experience with role-based, user-based, job-based, rule-based, intersection, aggregation, and segment-based security groups.
• 3+ years of experience with domain security policies, business process security policies, role assignments, and organization constraints.
• 3+ years of experience supporting HCM and Compensation security in a complex enterprise environment.
• 3+ years of experience with Workday report security, including data-source and field-level domain analysis.
• 3+ years of experience with integration security, including Integration System Users (ISUs), Integration System Security Groups (ISSGs), integration domains, and EIB security.
• 2+ years of experience supporting access reviews, audit evidence, segregation-of-duties analysis, and security controls.
• 2+ years of experience using ServiceNow, Jira, or comparable work-management platforms.
• 2+ years demonstrating strong analytical, troubleshooting, documentation, and stakeholder-communication skills.

Preferred Qualifications:

• Workday Pro Security certification.
• Experience supporting a large, highly regulated enterprise Workday environment.
• Knowledge of SOX controls, privacy requirements, data classification, and privileged-access governance.
• Experience with Workday Reporting, Security Administration Hub, Prism, integrations, and release-management practices.
• Healthcare industry experience.

Education:

• Bachelor's degree in Information Systems, Computer Science, Human Resources Technology, Cybersecurity, or a related field, or equivalent relevant experience.

The typical pay range for this role is: $83,430.00 - $222,480.00