Senior Workday Security Analyst

ESSENTIAL JOB DUTIES & RESPONSIBILITES:   

• Security Design & Implementation  
  Architect and deliver scalable, enterprise-grade security frameworks across Workday’s HR and Finance modules aligning business objectives and security best practices.   

• Security Configuration & Administration  
  Lead the configuration and administration of Workday security, including, but not limited to:    

• Domain security policies   

• Business process security policies   

• Role-based security groups   

• User-based security groups   

• Intersection and constrained security groups   

• Segregation of duties (SoD)   

• Tenant level security architecture   

•  Authentication and authorization concepts   

• Security inheritance and propagation  

• Security Architecture & Optimization  
  Continuously assess and mature the Workday security architecture by identifying gaps, reducing complexity and implementing improvements that enhance scalability, performance, and least-privilege access.   

• Authentication & Integration Security  
  Design and manage secure authentication frameworks, including OAUTH, SAML, Step-Up, Whitelisting, Single Sign-On (SSO), ensuring seamless and secure integrations across enterprise systems.   

• Issue Resolution & Operational Excellence  
  Serve as a subject matter expert in troubleshooting and resolving complex security issues, ensuring timely resolution while maintaining system integrity and business continuity.   

• Provisioning and deprovisioning users   

• Managing role assignments   

• Security group maintenance   

• Troubleshooting access issues   

• Creating and modifying security configurations   

• Supporting tenant refreshes and migrations   

• Running security audits   

• Managing emergency access procedures  

• Continuous Improvement & Release Management  
  Proactively monitor Workday releases and emerging capabilities, assessing impact and driving adoption of new features to enhance security posture and operational efficiency.   

• User Access & Provisioning Governance