Business Enterprise Systems Transformation (BEST) Security Assurance Engineer

This is an opportunity to join a large-scale public sector enterprise transformation initiative supporting the migration of a legacy Human Resources and Payroll platform to a cloud-based Workday environment serving more than 95,000 employees across a complex government organization. Based in Boston, MA, this hybrid contract role is ideal for a Security Architect who can lead security strategy, architecture, governance, identity management, and compliance efforts across a high-profile SaaS implementation.
This role offers the chance to influence security decisions from design through go-live and ongoing operations while partnering with executive leadership, cloud vendors, systems integrators, compliance teams, and technology organizations. Candidates who enjoy balancing technical security architecture with governance, risk management, cloud security, and stakeholder collaboration will find significant impact and visibility in this transformation program.

Required Skills & Experience

• Bachelor's degree in Computer Science, Systems Analysis, Information Security, Risk Management, or a related field; equivalent experience considered.
• Minimum 9 years of IT design and implementation experience.
• Expertise in at least two technical disciplines including infrastructure, networking, application development, APIs, databases, middleware, storage, systems administration, or operations.
• Minimum 5 years of security architecture design and implementation experience.
• Experience developing security architectures, implementation roadmaps, technical controls, policies, and procedures.
• Strong knowledge of security frameworks including NIST, ISO 27000-series, ITIL, SOX, and COBIT.
• Experience designing and implementing cloud security solutions.
• Deep knowledge of Identity and Access Management (IAM), Single Sign-On (SSO), and Multi-Factor Authentication (MFA).
• Experience integrating security technologies and third-party vendor solutions.
• Knowledge of Privileged Access Management (PAM), Data Loss Prevention (DLP), encryption, endpoint security, anti-malware solutions, vulnerability management, patch management, network security, and compliance automation tools.
• Experience conducting risk assessments, business impact assessments, control assessments, and vulnerability assessments.
• Strong communication, analytical, organizational, and business analysis skills.
• Experience using JIRA or similar issue-tracking platforms.
• Relevant security certification such as Security+ or equivalent.
• Ability to collaborate across technical, business, vendor, and executive stakeholder groups.

• Experience securing Human Resources and Payroll systems.
• Hands-on experience with Workday HCM, Payroll, Workday Prism, and Workday security administration.
• Experience implementing security controls within large enterprise or public-sector environments.
• Experience supporting cloud SaaS migrations from legacy on-premises platforms.
• Experience with Microsoft security technologies and services.
• Experience with Snowflake security capabilities.
• Experience with AI governance, AI security controls, and responsible adoption of AI-enabled platforms.
• Experience supporting security audits, compliance programs, and remediation initiatives.
• Experience transitioning operational security ownership from IT teams to business teams.

• Design and implement security architecture, controls, policies, and procedures for a cloud-based Workday HR and Payroll platform.
• Establish security requirements throughout design, development, testing, deployment, and operations.
• Lead identity and access management strategy including SSO, MFA, Azure Active Directory integration, provisioning, deprovisioning, onboarding, and offboarding processes.
• Define security roles, permissions, workflows, and data access controls.
• Perform security risk assessments, vulnerability assessments, business impact analyses, and control reviews.
• Monitor compliance with security frameworks, regulatory requirements, vendor obligations, and service-level agreements.
• Oversee security documentation, audit evidence, risk registers, remediation plans, and compliance reporting.
• Support implementation of Security Information and Event Management (SIEM) capabilities and security monitoring processes.
• Coordinate incident response activities, investigations, remediation efforts, and tabletop exercises.
• Evaluate emerging threats, vendor advisories, and vulnerability notifications.
• Review cloud security controls, business continuity plans, disaster recovery procedures, and recovery testing results.
• Collaborate with program leadership, systems integrators, cloud vendors, compliance teams, and independent validation partners.
• Support secure data migration and conversion activities from legacy systems to Workday.
• Evaluate security implications of AI capabilities and ensure appropriate governance controls are established.
• Provide strategic guidance on risk mitigation, compliance initiatives, and security investments.

• Workday HR & Payroll Security
• Workday Prism
• Microsoft Azure Active Directory
• Identity & Access Management (IAM)
• Single Sign-On (SSO)
• Multi-Factor Authentication (MFA)
• Security Information and Event Management (SIEM)
• Privileged Access Management (PAM)
• Data Loss Prevention (DLP)
• Snowflake Security
• Cloud SaaS Security
• JIRA
• NIST, ISO 27000, COBIT, ITIL, SOX Compliance Framework