Senior Workday Security Engineer

We’re building a world of health around every individual — shaping a more connected, convenient and compassionate health experience. At CVS Health®, you’ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger – helping to simplify health care one person, one family and one community at a time.

CVS Health is seeking an experienced Senior Workday Security Engineer to join the HR Technology Workday Security team. This role designs, supports, governs, and optimizes security across the Workday platform, with a primary focus on HCM, Compensation, Reporting, and Access Management.

The role partners with HR, Compensation, Payroll, Talent Acquisition, Reporting, and HR Technology teams to protect sensitive workforce data, apply least-privilege access, improve operational controls, and support security modernization.

• Design, configure, and maintain Workday security groups, roles, domains, and business process security policies.
• Support security requirements across HCM, Compensation, Benefits, Payroll, Talent, Recruiting, and Reporting.
• Troubleshoot complex access issues, perform root-cause analysis, and deliver clear remediation recommendations.
• Manage Workday security access requests and approvals through Service Now, with complete documentation and traceability.
• Apply least-privilege and segregation-of-duties principles; support periodic access reviews and remediation.
• Analyze custom-report sharing, data sources, and field-level domains to prevent inappropriate data exposure.
• Support audit, risk, privacy, and compliance activities by producing accurate evidence and maintaining control documentation.
• Own and maintain SOPs, runbooks, knowledge articles, role matrices, security inventories, and change records.
• Track operational metrics, ticket volumes, SLA performance, backlog trends, and recurring access issues.
• Support Workday release impact assessments, sandbox-first testing, migrations, and controlled production deployment.
• Contribute to security re-architecture, role redesign, security standardization, and continuous-improvement initiatives.
• Cross train team members and build reusable documentation to reduce key-person dependency.
• Design and define the technical architecture and infrastructure required for digital solutions.
• Write code, develop software components, and implement complex functionalities according to project requirements.
• Integrate various software components or systems, ensuring seamless communication and interoperability between different parts of the digital solution.
• Write and execute comprehensive test cases, conduct code reviews, perform debugging, and troubleshoot issues to ensure the reliability, stability, and high quality of digital solutions.
• Participate in agile or other development methodologies, attend meetings, contribute to project planning, and help drive the progress and success of digital projects.
• Explore new tools, frameworks, and techniques to improve digital solutions and drive innovation within the development team.
• Create and maintain technical documentation, including system designs, architecture diagrams, code documentation, and other relevant documentation while sharing their knowledge and expertise with team members, ensuring effective knowledge transfer and collaboration.

• 5+ years of experience with Workday.
• 3+ years of experience focused on Workday configurable security.
• 3+ years of hands‑on experience with role‑based, user‑based, job‑based, rule‑based, intersection, aggregation, and segment‑based security groups.
• 3+ years of experience with domain security…