Program Security Architect

Requirements:

• Experience designing and recommending information security protocols, procedures, policies, and standards.
• Knowledge of infrastructure, application, and user authentication security, including access controls and user provisioning and de-provisioning.
• Ability to assess security risks and recommend technical controls and compliance or risk-mitigation strategies.
• Ability to coordinate with project teams, vendors, systems integrators, security offices, and risk management teams.
• Ability to document security operations and support IT, statewide, and third-party audits.

Responsibilities:

• Support adoption of the future-state end-user security solution and protocols for the HR Management and Payroll system.
• Oversee implementation of infrastructure, application, and user authentication security components.
• Develop and recommend procedures for monitoring vendor performance against security service-level agreements, audits, and disaster recovery testing.
• Gather project documentation and artifacts to support audits, data conversion, validation, operations, and data reliability.
• Recommend policies and controls for user roles, data access, and provisioning and de-provisioning.
• Provide input on security technology selection and deployment, compliance, and risk-management strategies.
• Coordinate operational change management, including training materials, resources, and opportunities related to HR Payroll policies and system implementation.
• Work with project teams, vendors, systems integrators, and Commonwealth security and risk teams to onboard Workday and Workday Prism to the Commonwealth single sign-on service.
• Oversee vendor security service-level agreements and advise on security reporting and the use of AI tools in the program and Workday product.
• Ensure information security operations documentation is completed and develop strategies, procedures, and role assignments to enforce requirements and address risks.
• Oversee security configuration updates and implementation controls, ensuring security and access needs are addressed throughout the user lifecycle.
• Advise on migration of end users from the legacy system and coordinate identification and provisioning of approved users for launch.

Technologies:

• AI
• Architect
• Support
• Security

More

We are recruiting a Program Security Architect for the BEST program in Boston, Massachusetts. The role supports the technical lead and deputy program manager on security for a future-state Human Resource Management and Payroll solution delivered using a SaaS model, with annual third-party audits of data security procedures. The posted wage range is $100–$107 per hour; the eventual rate is determined through a comprehensive analysis of relevant qualifications, experience, education, organizational comparisons, and market and business factors. We offer medical, dental, and vision coverage; dependent-care flexible spending; a 401(k) plan; voluntary insurance coverage; an employee assistance program; and sick leave, subject to applicable eligibility, waiting-period, contribution, and other terms. We are an equal opportunity employer, including for protected veterans and individuals with disabilities.

last updated 43 week of 2026