Corporate System Security Administrator (15105, Grade 28)
The Maryland-National Capital Park and Planning Commission
·Yesterday
- Salary
- $75k – $136k/yr
- Location
- Riverdale, MD, MD
- Department
- Administration
- Closing date
- Today
- Source
- GovernmentJobs
Description
Under direction, within the Office of the Chief Information Officer and the Enterprise Information Technology (EIT) program, leads and performs enterprise application security administration for the Commission’s Workday ERP environment and related enterprise systems. The position is responsible for designing, configuring, administering, documenting, monitoring, and continuously improving security controls across Workday Human Capital Management, Payroll, Benefits, Finance, Procurement, Planning, Learning, reporting, integrations, and other implemented capabilities.
The incumbent develops and maintains Workday security groups, domain and business process security policies, role assignments, integration system security, service accounts, application programming interface access, and identity-related controls. The position applies least-privilege, role-based access, segregation-of-duties, privacy, audit, and risk-management principles; supports access certifications and control testing; and coordinates security incident response, remediation, and evidence collection.
The incumbent serves as a Workday security subject-matter expert within the EIT operating model and collaborates with functional owners, Information Security, Identity and Access Management, Internal Audit, Human Resources, Finance, Procurement, technical teams, implementation partners, and vendors. Work includes translating business requirements into secure access models, evaluating cross-functional impacts, supporting testing and production migrations, monitoring security changes and Workday releases, and maintaining a controlled, supportable, and auditable security environment.
Work may involve highly confidential or sensitive workforce, payroll, financial, procurement, and security information. Assignments are carried out independently within established policies, governance standards, change-control procedures, and accepted professional practices. The incumbent keeps management informed of status, risks, non-routine issues, and decisions requiring escalation. Work is evaluated for effectiveness, security, compliance, quality, timeliness, customer service, teamwork, documentation, and successful resolution of technical and business-control issues.
- Administers the Workday security framework, including security groups, domains, business process security policies, role assignments, user-based and role-based groups, segment-based or intersection security, and related tenant security configurations.
- Reviews, validates, provisions, modifies, and deprovisions access requests. Confirms authorization, business need, role alignment, least privilege, segregation of duties, and required approvals before implementing access.
- Administers and monitors privileged access, integration system users, service accounts, API access, and security supporting Workday integrations. Coordinates identity controls such as single sign-on, multifactor authentication, and identity lifecycle processes with appropriate technical teams.
- Performs periodic access reviews and certifications; monitors security group membership, domain access, business process permissions, elevated access, and inactive or transferred users; identifies and remediates inappropriate, excessive, conflicting, or obsolete access.
- Develops and maintains segregation-of-duties rules and compensating controls in coordination with functional owners, Finance, Human Resources, Procurement, Information Security, and Internal Audit.
- Creates and maintains security dashboards, audit reports, exception reports, control evidence, metrics, and documentation supporting operational monitoring, internal control assessments, external audits, privacy reviews, and regulatory or governance requirements.
- Investigates Workday security incidents, access anomalies, control failures, and suspected misuse. Performs root-cause analysis, coordinates containment and remediation, preserves relevant evidence, and recommends preventive improvements in accordance with incident response procedures.
- Maintains comprehensive security procedures and records, including request and approval documentation, provisioning and deprovisioning records, role design, security configuration decisions, test results, migration evidence, access-review results, exceptions, and remediation actions.
EIT Program, Governance, and Continuous Improvement
- Supports the EIT governance model by providing security analysis, recommendations, risk assessments, decision support, and status reporting for Workday and related enterprise initiatives.
- Participates in design reviews, architecture discussions, release planning, prioritization, testing, readiness, and post-production support. Escalates issues affecting security, compliance, scope, schedule, resources, or business operations through established governance channels.
- Coordinates with Workday, the implementation partner, managed-service providers, and other vendors to resolve security issues, validate remediations, obtain documentation, and maintain vendor accountability.
- Maintains current knowledge of Workday security features, semiannual releases, applicable Commission standards, cybersecurity practices, audit expectations, privacy requirements, and public-sector control frameworks. Assesses relevant changes and recommends adoption or remediation actions.
- Develops and delivers security guidance, procedures, knowledge articles, and role-based training for functional teams, support staff, approvers, and other authorized users. Provides technical direction and mentoring to less experienced staff.
- Promotes continuous improvement by analyzing service trends, recurring access issues, audit findings, security exceptions, and stakeholder feedback; recommends automation, standardization, and control enhancements that reduce risk and manual effort.
- Provides backup support for related enterprise application security and identity-access activities, as assigned. Performs other duties as assigned.
Important Worker Characteristics
A. Knowledge
- Expert knowledge of enterprise application security administration, identity and access management, role-based access control, least privilege, segregation of duties, privileged access, audit controls, privacy, and security risk management.
- Advanced knowledge of Workday security architecture, including security groups, domains, business process security, role assignments, integration security, service accounts, API access, tenant security, and security reporting.
- Knowledge of Workday HCM, Payroll, Benefits, Finance, Procurement, Planning, Learning, reporting, integrations, and related cross-functional business processes sufficient to assess access and control impacts.
- Knowledge of enterprise change management, release management, testing, migration, incident response, service management, documentation, and project governance practices.
- Knowledge of information technology disciplines such as application architecture, cloud services, integrations, databases, network concepts, identity services, logging, monitoring, quality assurance, and production operations.
- Knowledge of applicable Commission policies and procedures and relevant public-sector security, privacy, audit, records, and regulatory expectations. Knowledge of frameworks such as NIST Cybersecurity Framework is desirable.
- Configure, analyze, test, document, and troubleshoot complex Workday security and access requirements across multiple functional areas.
- Interpret business requirements, policies, audit findings, and risk information and translate them into secure, practical, and supportable controls.
- Conduct access reviews, security assessments, control testing, root-cause analysis, and remediation; identify subtle risks and recommend proportionate corrective action.
- Use reporting and analytical tools to monitor access, identify anomalies, track metrics, prepare audit evidence, and communicate risk and compliance status.
- Lead or coordinate security workstreams, assign or review technical tasks, mentor staff, facilitate decisions, and work effectively across functional, technical, audit, vendor, and executive stakeholders.
- Communicate complex security and Workday concepts clearly in written and verbal form to technical and nontechnical audiences; obtain agreement, compliance, or timely action when required.
- Exercise discretion, sound judgment, confidentiality, customer service, and attention to detail while managing competing priorities and sensitive information.
- Bachelor’s Degree in Business Management, Computer Science, Information Systems or any related field.
- Four (4) years of experience in Enterprise Resource Planning Systems or related experience.
- An equivalent combination of education and experience may be substituted, which together total six (8) years.
- Direct experience configuring and administering Workday security for HCM, Payroll, Financials, Procurement, Benefits, integrations, or related modules.
- Workday Pro, Workday security training, or comparable Workday credentials.
- Experience supporting a large-scale Workday implementation and establishing post-production security governance and operational support.
- Experience with enterprise identity platforms, single sign-on, multifactor authentication, identity governance, service management, security information and event management, or access-review tools.
- Experience in government, public sector, or another regulated environment and familiarity with internal and external audit support.
May be subject to medical, drug and alcohol testing.
Working Conditions: Works primarily in an office or approved remote-work setting. Work is predominantly sedentary and requires light physical effort. Work must be performed accurately and may require occasional overtime, after-hours, weekend, release-window, incident-response, or on-call support. The position may be subject to high work volume, tight deadlines, competing priorities, production incidents, audit requests, and handling of confidential or sensitive information.
The Maryland-National Capital Park and Planning Commission (M-NCPPC) is an Equal Opportunity Employer. We celebrate a workplace culture of diversity, equity and inclusion without discrimination or harassment on the basis of race, color, religion, sex, age, national origin, sexual orientation, marital status, disability, genetic information, gender identity, or any other non-merit factor.