Workday Security Administrator

Redwood Software is the leader in full stack automation for mission-critical business processes. With the first SaaS-based composable automation platform specifically built for ERP, we believe in the transformative power of automation. Our unparalleled solutions empower organizations to orchestrate, manage and monitor their workflows across any application, service or server – in the cloud or on premise – with confidence and control.

One Team. One Redwood

Make Your Own Weather

Obsess over Customer Success

Work the Problem

Be Curious

Own the Outcome

Respect Each Other 

Redwood is seeking an experienced Workday Security Administrator to join our IT function and support the security architecture of our Workday Financials and HCM tenants. This role is responsible for designing, configuring, maintaining, and auditing Workday security groups, domain/business process policies, and role-based access across the platform. The ideal candidate has deep hands-on Workday security configuration experience and can partner effectively with Finance, HR, and IT stakeholders based in the US while working a schedule aligned to Eastern time zone business hours. This role will be on-site in our Hyderabad office and expected to work 6:30pm – 3:30am IST (8:00am - 5:00pm EST).

• Design, build, and maintain Workday security groups (constrained, unconstrained, role-based, job-based, segment-based) and domain/business process security policies across HCM and Financials, ensuring proper segregation of duties (SoD)
• Own SoD conflict analysis and periodic access recertification, remediating findings in partnership with Finance and HR process owners
• Serve as the primary point of contact for SOX and internal audit requests related to Workday access controls, providing evidence of configuration, approvals, and change history
• Partner with Finance (R2R, P2P, O2C, FP&A) and HR/HCM process owners to translate access and workflow requirements into secure, compliant configurations
• Troubleshoot and resolve security-related tickets — access issues, business process routing errors, permission escalations — within SLA
• Manage security-related change requests through a formal change control process, including impact analysis and testing
• Manage Workday biannual releases, including evaluating new features and impacts, coordinating with internal Workday practitioners to complete testing/implementation of required security configuration changes, and ensuring successful deployment with minimal disruption in access or business process routing.
• Maintain security configuration documentation — group design, business process security matrices, and change logs — as a living audit-ready reference
• Build, test, and maintain Workday integrations, including inbound and outbound interfaces, troubleshooting integration issues, validating data accuracy, and implementing enhancements to support evolving business and system requirements. 
• Administer integration security (ISU accounts, integration system security groups, API access scoping) in coordination with the integrations team

• 5–7+ years of hands-on Workday security administration experience, including direct configuration of security groups and domain/business process policies
• Working knowledge of both Workday HCM and Financials security models (constrained vs. unconstrained groups, segment-based security, org-based security)
• Experience supporting SOX-controlled environments and audit evidence requests
• Experience with Workday EIB, Workday Studio/Core Connectors (for security-adjacent integration work), and report/calculated field security implications
• Strong understanding of segregation of duties principles as applied to finance and HR processes
• Ability to work core hours aligned to 8:00 AM–5:00 PM EST to support US-based stakeholders
• Excellent written and verbal English communication skills for cross-time-zone collaboration

• Workday Pro Security certification
• Experience with Workday Financials security specifically (e.g., R2R, P2P, O2C, Banking & Settlement, or FP&A domains)
• Prior experience in a global shared-services or IT security operations function
• Exposure to identity governance tools or IAM integration with Workday
• Experience supporting agentic AI or automation initiatives layered on Workday