Summary

Supports day-to-day administration, maintenance, documentation, testing, and governance of security within Workday. The role completes approved security changes, supports access requests, assists with troubleshooting, and helps maintain a secure and well-controlled Workday environment.

Works with the Workday team, functional owners, Enterprise Technology, and other stakeholders to support role-based access, security groups, domain and business process security, access reviews, testing, and security documentation. Complex security design decisions are escalated to senior resources.

Duties and Functions

• Process approved Workday security and access requests in accordance with established approvals and change controls.

• Create and maintain authorized Workday security group and role assignments.

• Support domain security policies and business process security policies using established standards and senior guidance.

• Troubleshoot routine user-access issues involving roles, security groups, domain security, business process security, and organizational assignments.

• Support joiner, mover, and leaver access activities.

• Perform security testing in non-production tenants and document results before promotion.

• Assist with periodic access reviews and document excessive, outdated, conflicting, or inappropriate access for remediation.

• Maintain security inventories, configuration notes, test evidence, procedures, and audit support documentation.

• Apply least-privilege, segregation-of-duties, privacy, and access-governance principles.

• Support Workday releases, configuration changes, regression testing, and production validation.

• Partner with Workday functional analysts and business process owners to implement approved access requirements.

• Provide security evidence for internal controls, compliance reviews, and audits.

• Triage security incidents and access issues, resolve routine items, and escalate complex or high-risk issues.

Education and Experience

Bachelor's degree in Information Systems, Cybersecurity, HRIS, Business, or a related field preferred; equivalent relevant experience may be considered.

Experience supporting enterprise applications, identity/access administration, HRIS, ERP, or related technology preferred.

Prior Workday administration or Workday security experience strongly preferred.

Preferred Requirements

• 1-3 years of experience in Workday, HRIS/ERP administration, application security, identity and access management, or a related support function.

• Working knowledge of Workday security groups, roles, domain security policies, business process security policies, and organization-based assignments.

• Understanding of role-based access control, least privilege, segregation of duties, access governance, and change management.

• Experience investigating access issues and documenting root cause and resolution.

• Experience with ticketing or work-management systems and structured approval workflows.

• Experience with Azure DevOps (ADO) Boards, work items, documentation, or change tracking is preferred.

• Ability to create clear security documentation, test scripts, evidence, and support procedures.

• Workday security training or certification preferred but not required.

Knowledge/Skills/Abilities (KSA)

• Knowledge of access-control principles including least privilege, role-based access, segregation of duties, and protection of sensitive data.

• Knowledge of Workday security concepts and how assignments affect access to domains, business processes, reports, and functional activities.

• Skill in methodical troubleshooting and documentation of access issues.

• Skill in controlled change execution, accurate recordkeeping, and validation testing.

• Ability to communicate with functional and technical stakeholders and appropriately escalate risks or design questions.

• Ability to handle sensitive access and security information responsibly and confidentially.

Supervisory Responsibilities

This position does not have supervisory responsibilities.

Work Environment/Condition

Work is primarily performed in a professional office or remote environment using standard computer, collaboration, and communications equipment.

Physical Demands

The employee must be able to perform the essential functions with or without reasonable accommodation, including extended computer work, operating standard office equipment, and participating in meetings.

Acknowledgement

Loyal Source provides healthcare and technology solutions designed to improve outcomes and support mission-critical operations. Guided by innovation and purpose, we help organizations achieve success across complex challenges worldwide. Loyal Source is a military friendly employer and proud partner of the Military Spouse Employment Partnership program.  

Loyal Source uses AI‑powered voice screening as part of our application process. After you apply, you will receive a brief qualification survey via text or email. Candidates who meet the position requirements will then be invited to complete a quick AI‑powered voice assessment. This easy, no‑scheduling‑required process helps us and the candidate move the hiring process forward faster.  

We are committed to providing equal employment opportunities to all applicants. If you have a disability or medical condition and need a reasonable accommodation to participate in this step of the hiring process, you may request an alternative method or accommodation at any time by contacting Human Resources at HRmgt@loyalsource.com. 

If you are a qualified individual with a disability or a disabled veteran, you may request a reasonable accommodation by contacting HR at HRmgt@loyalsource.com. If you are unable or limited in your ability to access job openings or apply for a job on this site as a result of your disability, please select the accessibility menu to the (right or left) for more assistance. You can also request reasonable accommodations by contacting a telecommunications relay service by dialing 711 for direct access and assistance (tty).

This contractor and subcontractor abides by the requirements of 41 CFR 60-300.5(a) and 41 CFR 60-741.5(a).
These regulations prohibit discrimination against qualified individuals on the basis of protected veteran status or disability, and require affirmative action by covered prime contractors.