Security Architect Jobs

About The Position

Requirements

• Bachelor's degree in computer science, data science, information science, business, or a related field.
• At least 5 years of progressive IT experience, including strong database design, data architecture, and data transformation processes.
• Experience in data architecture and design.
• Some experience with data governance, including implementation of a data governance framework.
• Experience with leading industry tools for data lakes, big data, or ETL.
• Some experience and knowledge in Master Data Management and Data Dictionary Standards.
• Experience providing technical guidance and mentorship within Data Engineering.
• Proven performance in an earlier or comparable role.
• Strong analytical and problem-solving skills, including ability to troubleshoot complex security and access issues.
• Strong communication and collaboration skills, including ability to explain complex security concepts, work across organizational boundaries, and influence decisions without direct authority.
• Ability to think critically, draw insights from data, identify root causes, adapt to change, and remain focused on goals in challenging or uncertain circumstances.
• Ability to prioritize and address needs from multiple customers and stakeholders while delivering efficient, responsive, high-quality, fit-for-purpose work.
• Ability to take accountability for work outcomes and proactively manage interdependencies across adjacent work areas.
• Ability to plan holistically for the impacts and interdependencies of work and processes across IT and other teams, with attention to quality, cost, and sustainability.
• Collaborative approach, emotional empathy, and ability to negotiate through challenging situations.

Nice To Haves

• Master's degree.
• At least 5 years of hands-on Workday Security experience, including senior, lead, or architectural responsibilities.
• Workday Security certification.
• Deep expertise in the Workday security framework, including domain and business process security, security groups, SoD, intersection/segment/contextual security, integration security (ISU/ISSG), and data privacy/sensitive access.
• Experience designing scalable security solutions and assessing security impacts across Workday implementations, enhancements, releases, integrations, and functional areas.
• Experience supporting security audits, access reviews, compliance activities, and remediation, with knowledge of least privilege, role-based access, SoD, and security risk management.
• Experience supporting Workday security in healthcare or another highly regulated environment.
• Experience with Kainos SmartAudit or similar Workday security governance and compliance tools.
• Experience across Workday functional areas such as HCM, Financials, Supply Chain, PRISM, Adaptive Planning, Payroll, Time Tracking, Absence, and Reporting.
• Experience with SSO/SAML, authentication, ServiceNow/ITIL processes, and technical leadership or mentoring.

Responsibilities

• Own the overall Workday security architecture and configuration model, including domain and business process security policies, security groups, role-based access, and constrained security.
• Establish and maintain Workday security architecture standards, design principles, policies, procedures, and technical documentation for consistent administration, knowledge transfer, and audit readiness.
• Lead the design and implementation of complex security roles, security groups, and access models using least-privilege and role-based access principles.
• Review and advise on security changes across Workday functional areas, integrations, reporting, and emerging capabilities to ensure scalable, maintainable, compliant designs aligned with the broader Workday architecture.
• Communicate security risks, recommendations, and decisions to Workday program leadership and senior governance forums as needed.
• Own the Workday security risk and control strategy, including Segregation of Duties (SoD), Privileged/Sensitive Access (SA), User Activity monitoring, and preventative and detective controls.
• Lead and provide subject matter expertise for internal and external Workday security and access audits; work with stakeholders to evaluate findings, determine remediation, and oversee resolution of security-related risks.
• Own the strategy, roadmap, and continued evolution of Kainos SmartAudit and other Workday security monitoring and compliance capabilities.
• Establish standards and oversight for periodic access reviews and security certifications, including governance, documentation, and remediation; maintain audit-ready evidence and documentation.
• Ensure security architecture and practices protect sensitive and regulated information, including PII and PHI.
• Lead security impact assessments for Workday R1/R2 releases, new capabilities, projects, integrations, and functional changes; identify security changes, risks, dependencies, and remediation.
• Provide security architecture and design leadership throughout Workday initiatives, from requirements and solution design through testing and deployment.
• Design, configure, test, and implement complex Workday security solutions across domain and business process security, security groups, intersection security, integration security, and other advanced configurations.
• Lead security-related projects and initiatives, coordinating across functional, technical, audit, and Information Security stakeholders.
• Serve as the senior Workday Security subject matter expert and escalation point for complex security issues, troubleshooting, and design decisions.
• Perform hands-on Workday security administration and complex technical work; provide technical direction, coaching, and knowledge transfer to administrators, Tier 1 support, and other team members.
• Oversee the effectiveness and consistency of Workday security administration and ensure operational activities align with architecture, standards, and controls.
• Identify opportunities to improve, automate, standardize, and simplify Workday security processes and controls.

Benefits

• The posting refers to exceptional benefits but does not specify individual benefits.