Senior Workday Security Engineer

We’re building a world of health around every individual — shaping a more connected, convenient and compassionate health experience. At CVS Health®, you’ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger – helping to simplify health care one person, one family and one community at a time.

Position Summary
CVS Health is seeking an experienced Senior Workday Security Engineer to join the HR Technology Workday Security team. This role designs, supports, governs, and optimizes security across the Workday platform, with a primary focus on HCM, Compensation, Reporting, and Access Management.

The role partners with HR, Compensation, Payroll, Talent Acquisition, Reporting, and HR Technology teams to protect sensitive workforce data, apply least-privilege access, improve operational controls, and support security modernization.
Key Responsibilities:

• Design, configure, and maintain Workday security groups, roles, domains, and business process security policies.
• Support security requirements across HCM, Compensation, Benefits, Payroll, Talent, Recruiting, and Reporting.
• Troubleshoot complex access issues, perform root-cause analysis, and deliver clear remediation recommendations.
• Manage Workday security access requests and approvals through ServiceNow, with complete documentation and traceability.
• Apply least-privilege and segregation-of-duties principles; support periodic access reviews and remediation.
• Analyze custom-report sharing, data sources, and field-level domains to prevent inappropriate data exposure.
• Support audit, risk, privacy, and compliance activities by producing accurate evidence and maintaining control documentation.
• Own and maintain SOPs, runbooks, knowledge articles, role matrices, security inventories, and change records.
• Track operational metrics, ticket volumes, SLA performance, backlog trends, and recurring access issues.
• Support Workday release impact assessments, sandbox-first testing, migrations, and controlled production deployment.
• Contribute to security re-architecture, role redesign, security standardization, and continuous-improvement initiatives.
• Cross train team members and build reusable documentation to reduce key-person dependency.
• Design and define the technical architecture and infrastructure required for digital solutions.
• Write code, develop software components, and implement complex functionalities according to project requirements.
• Integrate various software components or systems, ensuring seamless communication and interoperability between different parts of the digital solution.
• Write and execute comprehensive test cases, conduct code reviews, perform debugging, and troubleshoot issues to ensure the reliability, stability, and high quality of digital solutions.
• Participate in agile or other development methodologies, attend meetings, contribute to project planning, and help drive the progress and success of digital projects.
• Explore new tools, frameworks, and techniques to improve digital solutions and drive innovation within the development team.
• Create and maintain technical documentation, including system designs, architecture diagrams, code documentation, and other relevant documentation while sharing their knowledge and expertise with team members, ensuring effective knowledge transfer and collaboration.

Required Qualifications

• 5+ years of experience with Workday.
• 3+ years of experience focused on Workday configurable security.
• 3+ years of hands-on experience with role-based, user-based, job-based, rule-based, intersection, aggregation, and segment-based security groups.
• 3+ years of experience with domain security policies, business process security policies, role assignments, and organization constraints.
• 3+ years of experience supporting HCM and Compensation security in a complex enterprise environment.
• 3+ years of experience with Workday report security, including data-source and field-level domain analysis.
• 3+ years of experience with integration security, including Integration System Users (ISUs), Integration System Security Groups (ISSGs), integration domains, and EIB security.
• 2+ years of experience supporting access reviews, audit evidence, segregation-of-duties analysis, and security controls.
• 2+ years of experience using ServiceNow, Jira, or comparable work-management platforms.
• 2+ years demonstrating strong analytical, troubleshooting, documentation, and stakeholder-communication skills.

Preferred Qualifications

• Workday Pro Security certification.
• Experience supporting a large, highly regulated enterprise Workday environment.
• Knowledge of SOX controls, privacy requirements, data classification, and privileged-access governance.
• Experience with Workday Reporting, Security Administration Hub, Prism, integrations, and release-management practices.
• Healthcare industry experience.

Education

• Bachelor's degree in Information Systems, Computer Science, Human Resources Technology, Cybersecurity, or a related field, or equivalent relevant experience.

Anticipated Weekly Hours

Time Type

Pay Range

The typical pay range for this role is:

This pay range represents the base hourly rate or base annual full-time salary for all positions in the job grade within which this position falls.  The actual base salary offer will depend on a variety of factors including experience, education, geography and other relevant factors.  This position is eligible for a CVS Health bonus, commission or short-term incentive program in addition to the base pay range listed above. 
 

Our people fuel our future. Our teams reflect the customers, patients, members and communities we serve and we are committed to fostering a workplace where every colleague feels valued and that they belong.

Great benefits for great people

We take pride in offering a comprehensive and competitive mix of pay and benefits that reflects our commitment to our colleagues and their families.

Additional details about available benefits are provided during the application process and on Benefits Moments.

Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state and local laws.