Workday Security Administrator

Overview

Workday Security Administrator responsible for supporting the security architecture of Workday Financials and HCM tenants. The role designs, configures, maintains, and audits Workday security groups, domain and business process policies, and role-based access while partnering with Finance, HR, and IT stakeholders.

What you'll do

• Design, build, and maintain Workday security groups, including constrained, unconstrained, role-based, job-based, and segment-based groups.
• Design and maintain domain and business process security policies across HCM and Financials, ensuring proper segregation of duties.
• Own segregation-of-duties conflict analysis and periodic access recertification, remediating findings with Finance and HR process owners.
• Serve as the primary point of contact for SOX and internal audit requests related to Workday access controls, providing configuration, approval, and change-history evidence.
• Partner with Finance R2R, P2P, O2C, and FP&A and with HR/HCM process owners to translate access and workflow requirements into secure, compliant configurations.
• Troubleshoot and resolve security-related tickets, including access issues, business process routing errors, and permission escalations, within SLA.
• Manage security-related change requests through formal change control, including impact analysis and testing.
• Manage Workday biannual releases by evaluating new features and impacts, coordinating testing and implementation of required security configuration changes, and ensuring successful deployment with minimal disruption to access or business process routing.
• Maintain security configuration documentation, including group design, business process security matrices, and change logs, as a living audit-ready reference.
• Build, test, and maintain Workday integrations, including inbound and outbound interfaces; troubleshoot integration issues, validate data accuracy, and implement enhancements.
• Administer integration security, including ISU accounts, integration system security groups, and API access scoping, in coordination with the integrations team.

What you'll need

• 5–7+ years of hands-on Workday security administration experience, including direct configuration of security groups and domain/business process policies.
• Working knowledge of Workday HCM and Financials security models, including constrained versus unconstrained groups, segment-based security, and org-based security.
• Experience supporting SOX-controlled environments and audit evidence requests.
• Experience with Workday EIB and Workday Studio/Core Connectors for security-adjacent integration work.
• Knowledge of report and calculated field security implications.
• Strong understanding of segregation-of-duties principles as applied to finance and HR processes.
• Ability to work core hours aligned to 8:00 AM–5:00 PM EST to support US-based stakeholders.
• Excellent written and verbal English communication skills for cross-time-zone collaboration.

Nice to have

• Workday Pro Security certification.
• Experience with Workday Financials security, including R2R, P2P, O2C, Banking & Settlement, or FP&A domains.
• Prior experience in a global shared-services or IT security operations function.
• Exposure to identity governance tools or IAM integration with Workday.
• Experience supporting agentic AI or automation initiatives layered on Workday.

Details

• Location: Hyderabad, Telangana, India.
• Work mode: On-site in the Hyderabad office.
• Working hours: 6:30pm–3:30am IST, aligned to 8:00am–5:00pm EST.
• The role supports US-based stakeholders and requires cross-time-zone collaboration.