Workday Security Admin

Supports day-to-day administration, maintenance, documentation, testing, and governance of security within Workday. The role completes approved security changes, supports access requests, assists with troubleshooting, and helps maintain a secure and well-controlled Workday environment.

Works with the Workday team, functional owners, Enterprise Technology, and other stakeholders to support role-based access, security groups, domain and business process security, access reviews, testing, and security documentation. Complex security design decisions are escalated to senior resources.

• Process approved Workday security and access requests in accordance with established approvals and change controls.
• Create and maintain authorized Workday security group and role assignments.
• Support domain security policies and business process security policies using established standards and senior guidance.
• Troubleshoot routine user-access issues involving roles, security groups, domain security, business process security, and organizational assignments.
• Support joiner, mover, and leaver access activities.
• Perform security testing in non-production tenants and document results before promotion.
• Assist with periodic access reviews and document excessive, outdated, conflicting, or inappropriate access for remediation.
• Maintain security inventories, configuration notes, test evidence, procedures, and audit support documentation.
• Apply least-privilege, segregation-of-duties, privacy, and access-governance principles.
• Support Workday releases, configuration changes, regression testing, and production validation.
• Partner with Workday functional analysts and business process owners to implement approved access requirements.
• Provide security evidence for internal controls, compliance reviews, and audits.
• Triage security incidents and access issues, resolve routine items, and elevate complex or high-risk issues.

Bachelor's degree in Information Systems, Cybersecurity, HRIS, Business, or a related field preferred; equivalent relevant experience may be considered.

Experience supporting enterprise applications, identity/access administration, HRIS, ERP, or related technology preferred.

Prior Workday administration or Workday security experience strongly preferred.

• 1-3 years of experience in Workday, HRIS/ERP administration, application security, identity and access management, or a related support function.
• Working knowledge of Workday security groups, roles, domain security policies, business process security policies, and organization-based assignments.
• Understanding of role-based access control, least privilege, segregation of duties, access governance, and change management.
• Experience investigating access issues and documenting root cause and resolution.
• Experience with ticketing or work-management systems and structured approval workflows.
• Experience with Azure Dev Ops (ADO) Boards, work items, documentation, or change tracking is preferred.
• Ability to create clear security documentation, test scripts, evidence, and support procedures.
• Workday security training or certification preferred but not required.

• Knowledge of access-control principles including least privilege, role-based access, segregation of duties, and protection of sensitive data.
• Knowledge of Workday security concepts and how assignments affect access to domains, business processes, reports, and functional activities.
• Skill in methodical troubleshooting and documentation of access issues.
• Skill in controlled change execution, accurate recordkeeping, and validation testing.
• Ability to communicate with functional and technical stakeholders and appropriately escalat risks or design questions.
• Ability to handle sensitive access and security information responsibly and confidentially.

This position does not have supervisory responsibilities.

Work is primarily performed in a professional office or remote environment using standard computer, collaboration, and communications equipment.

The employee must be able to perform the essential functions with or without reasonable accommodation, including extended computer work, operating standard office equipment, and participating in meetings.

Loyal Source provides healthcare and technology solutions designed to improve outcomes and support mission-critical operations. Guided by…