Corporate System Security Administrator (15105, Grade 28)

The Maryland-National Capital Park & Planning Commission•Riverdale, MD

12d

About The Position

Under direction within the Office of the Chief Information Officer and the Enterprise Information Technology (EIT) program, the Corporate System Security Administrator leads and performs enterprise application security administration for the Commission’s Workday ERP environment and related enterprise systems. The position designs, configures, administers, documents, monitors, and improves security controls across Workday HCM, Payroll, Benefits, Finance, Procurement, Planning, Learning, reporting, integrations, and other implemented capabilities. Responsibilities include maintaining security groups and policies, role assignments, integration security, service accounts, API access, and identity-related controls while applying least-privilege, role-based access, segregation-of-duties, privacy, audit, and risk-management principles. The incumbent supports access certifications and control testing; coordinates security incident response, remediation, and evidence collection; and serves as a Workday security subject-matter expert within the EIT operating model. The position collaborates with functional owners, Information Security, Identity and Access Management, Internal Audit, Human Resources, Finance, Procurement, technical teams, implementation partners, and vendors. Work includes translating business requirements into secure access models, evaluating cross-functional impacts, supporting testing and production migrations, monitoring security changes and Workday releases, and maintaining a controlled, supportable, auditable security environment. Assignments are carried out independently within established policies, governance standards, change-control procedures, and professional practices. The incumbent keeps management informed of status, risks, non-routine issues, and decisions requiring escalation. The position supports EIT governance through security analysis, recommendations, risk assessments, decision support, and status reporting for Workday and related enterprise initiatives. It participates in design reviews, architecture discussions, release planning, testing, readiness, and post-production support; coordinates with Workday and other providers; maintains current knowledge of relevant security features and standards; delivers guidance and training; mentors less experienced staff; and recommends automation, standardization, and control enhancements. The position may provide backup support for related enterprise application security and identity-access activities and perform other duties as assigned. Work is primarily in an office or approved remote-work setting and is predominantly sedentary with light physical effort. Work may require occasional overtime, after-hours, weekend, release-window, incident-response, or on-call support. The position may involve high work volume, tight deadlines, competing priorities, production incidents, audit requests, and confidential or sensitive information. The position may be subject to medical, drug, and alcohol testing.

Requirements

Bachelor’s degree in Business Management, Computer Science, Information Systems, or a related field.
Four years of experience in Enterprise Resource Planning systems or related experience. An equivalent combination of education and experience may be substituted, which together total six (8) years, as stated in the posting.
Expert knowledge of enterprise application security administration, identity and access management, role-based access control, least privilege, segregation of duties, privileged access, audit controls, privacy, and security risk management.
Advanced knowledge of Workday security architecture, including security groups, domains, business process security, role assignments, integration security, service accounts, API access, tenant security, and security reporting.
Knowledge of Workday HCM, Payroll, Benefits, Finance, Procurement, Planning, Learning, reporting, integrations, and related cross-functional business processes sufficient to assess access and control impacts.
Knowledge of change management, release management, testing, migration, incident response, service management, documentation, and project governance practices.
Knowledge of IT disciplines including application architecture, cloud services, integrations, databases, network concepts, identity services, logging, monitoring, quality assurance, and production operations.
Knowledge of applicable Commission policies and procedures and relevant public-sector security, privacy, audit, records, and regulatory expectations.
Ability to configure, analyze, test, document, and troubleshoot complex Workday security and access requirements across multiple functional areas.
Ability to interpret business requirements, policies, audit findings, and risk information and translate them into secure, practical, and supportable controls.
Ability to conduct access reviews, security assessments, control testing, root-cause analysis, and remediation; identify risks and recommend proportionate corrective action.
Ability to use reporting and analytical tools to monitor access, identify anomalies, track metrics, prepare audit evidence, and communicate risk and compliance status.
Ability to lead or coordinate security workstreams, assign or review technical tasks, mentor staff, facilitate decisions, and work across functional, technical, audit, vendor, and executive stakeholders.
Ability to communicate complex security and Workday concepts clearly to technical and nontechnical audiences and obtain agreement, compliance, or timely action when required.
Ability to exercise discretion, sound judgment, confidentiality, customer service, and attention to detail while managing competing priorities and sensitive information.

Nice To Haves

Knowledge of frameworks such as the NIST Cybersecurity Framework.
Direct experience configuring and administering Workday security for HCM, Payroll, Financials, Procurement, Benefits, integrations, or related modules.
Workday Pro, Workday security training, or comparable Workday credentials.
Experience supporting a large-scale Workday implementation and establishing post-production security governance and operational support.
Experience with enterprise identity platforms, single sign-on, multifactor authentication, identity governance, service management, security information and event management, or access-review tools.
Experience in government, the public sector, or another regulated environment, and familiarity with internal and external audit support.

Responsibilities

Administer Workday security groups, domains, business process security policies, role assignments, user-based and role-based groups, segment-based or intersection security, and tenant security configurations.
Review, validate, provision, modify, and deprovision access requests, confirming authorization, business need, role alignment, least privilege, segregation of duties, and required approvals.
Administer and monitor privileged access, integration system users, service accounts, API access, and security supporting Workday integrations.
Coordinate single sign-on, multifactor authentication, and identity lifecycle controls with appropriate technical teams.
Perform periodic access reviews and certifications; monitor access and permissions; and identify and remediate inappropriate, excessive, conflicting, obsolete, or inactive-user access.
Develop and maintain segregation-of-duties rules and compensating controls with functional owners and relevant business and security teams.
Create and maintain security dashboards, audit reports, exception reports, control evidence, metrics, and documentation for monitoring, assessments, audits, privacy reviews, and governance requirements.
Investigate security incidents, access anomalies, control failures, and suspected misuse; perform root-cause analysis, coordinate containment and remediation, preserve evidence, and recommend preventive improvements.
Maintain security procedures and records, including request approvals, provisioning records, role designs, configuration decisions, test results, migration evidence, access-review results, exceptions, and remediation actions.
Provide security analysis, recommendations, risk assessments, decision support, and status reporting for Workday and related enterprise initiatives within the EIT governance model.
Participate in design reviews, architecture discussions, release planning, prioritization, testing, readiness, and post-production support; escalate issues through established governance channels.
Coordinate with Workday, implementation partners, managed-service providers, and vendors to resolve security issues, validate remediations, obtain documentation, and maintain vendor accountability.
Maintain current knowledge of Workday security features and releases, Commission standards, cybersecurity practices, audit expectations, privacy requirements, and public-sector control frameworks; assess changes and recommend actions.
Develop and deliver security guidance, procedures, knowledge articles, and role-based training for functional teams, support staff, approvers, and authorized users.
Provide technical direction and mentoring to less experienced staff.
Analyze service trends, recurring access issues, audit findings, security exceptions, and stakeholder feedback; recommend automation, standardization, and control improvements.
Provide backup support for related enterprise application security and identity-access activities as assigned; perform other duties as assigned.