Workforce Identity and Access Management Engineer - Okta / Sailpont

Cardinal Health International Philippines Inc.; Taguig; Hybrid; PHP 1,200,000 - 1,600,000; Full time

Job summary

Cardinal Health International Philippines Inc. is seeking an experienced IAM Engineer to design, implement, and manage enterprise IAM solutions supporting a global workforce.

You will lead M&A integration workstreams, consolidate identity providers into a unified SSO, and automate user lifecycle processes. The role demands strong scripting, security policy expertise, and collaboration across IT, HR, and security teams.

Qualifications

• 5+ years of progressive IAM engineering experience in enterprise environments.
• Experience supporting M&A integration projects is preferred.
• Strong knowledge of SSO standards (SAML, OAuth, OpenID Connect) and PAM.
• Hands-on experience with major IAM platforms listed in tools.
• Proficient in scripting languages (PowerShell, Python) for automation.
• Deep understanding of RBAC, least privilege, and Zero Trust concepts.
• Ability to communicate effectively with security, IT, HR, and development teams.

Responsibilities

• Lead IAM workstreams for M&A activities and unify disparate IdPs under a single SSO.
• Develop automated onboarding, transitions, and offboarding workflows.
• Implement adaptive MFA and comprehensive security policies for IAM.
• Manage hybrid AD and Azure AD environments; govern end-to-end lifecycle.
• Design and implement SSO, IAM, IGA, and PAM solutions.
• Ensure regulatory compliance and maintain auditable access records.
• Troubleshoot IAM issues and provide support to internal users.
• Coordinate across cross-functional teams and document procedures.

Skills

Directory services

SSO & federation

MFA

PAM

IAM platforms

Automation scripting

RBAC

DevOps & SDLC

Zero Trust

M&A experience

Education

Bachelor's degree in Computer Science/IT/Security

Tools

Okta

Azure AD/Entra ID

CyberArk

ForgeRock

Ping Identity

SailPoint

Saviynt

Job description

Shift: Nightshift

Job Description

Information Technology oversees the effective development, delivery, and operation of computing and information services. This function anticipates, plans, and delivers Information Technology solutions and strategies that enable operations and drive business value.

Information Security and Risk develops, implements, and enforces security controls to protect the organization's technology assets from intentional or inadvertent modification, disclosure, or destruction. This job family develops system back-up and disaster recovery plans, conducts incident responses, threat management, vulnerability scanning, virus management and intrusion detection as well as completes risk assessments.

We are seeking a highly skilled and experienced Identity and Access Management (IAM) Engineer to join our Workforce Identity team. In this pivotal role, you will be instrumental in designing, implementing, and managing IAM solutions that secure our global workforce and enterprise applications and facilitate the secure, efficient, and seamless integration of identity and access systems in context of our rapid growth through Mergers and Acquisitions. You will ensure robust access controls, streamline user experiences, and maintain operational continuity across our diverse IT landscape. By automating lifecycle events, integrating HR systems, and building intuitive self-service pathways, you will directly influence workforce productivity, security posture, and overall onboarding experience. The ideal candidate will have deep technical expertise in modern IAM principles, protocols and products along with strong management and communication skills.

Responsibilities

M&A and SSO Integration

• Lead IAM technical workstreams for Mergers, Acquisitions, and Divestitures.

• Consolidate disparate identity providers (IdPs) into a unified enterprise SSO platform.

• Design and execute cross-domain authentication and federation strategies.

Automation and Workflows

• Develop automated workflows to streamline user onboarding, transitions, and offboarding.

• Build API-driven automations to reduce manual provisioning overhead.

• Implement infrastructure-as-code (IaC) principles for IAM configurations.

Security Policy and Compliance

• Architect and enforce Enterprise SSO Security Policies, including adaptive Multi-Factor Authentication (MFA).

• Implement Least Privilege access models and Conditional Access Policies and Multi-Factor Authentication (MFA), Privileged Access Management (PAM), and Role-Based Access Control (RBAC) frameworks.

• Conduct regular access reviews and support IT compliance audits

Directory Services & Lifecycle Management

• Manage and optimize hybrid Active Directory (AD) and Azure AD / Entra ID environments.

• Govern the end-to-end User Lifecycle Management (LCM) process.

• Ensure data integrity and synchronization across HRIS, downstream applications, and directories.

• Solution Design & Implementation:Design, implement, and maintain IAM solutions including Single Sign-On (SSO), Identity life cycle management, IGA and PAM.

• Security & Compliance:Ensure IAM systems and processes comply with regulatory requirements (e.g., GDPR, HIPAA, SOX) and internal security policies, providing auditable records of access activities. Protect against data breaches by ensuring only authorized personnel can access sensitive information.

• Technical Troubleshooting & Support:Troubleshoot, identify, and resolve technical identity and access management-related issues, providing expert support to internal teams and end-users during and after integration.

• Collaboration & Communication:Coordinate cross-functional teams, including Information Security, IT Operations, HR, and Application Development, to ensure effective IAM implementation and seamless integration with business processes. Communicate complex security concepts to technical and non-technical stakeholders.

• Documentation & Best Practices:Develop, review, and maintain comprehensive technical documentation, including architecture diagrams, configuration guides, and operational procedures. Stay up-to-date with IAM best practices, regulatory requirements, and security trends.

Qualifications

• Education:Bachelor's degree in Computer Science, Information Technology, Information Security, or a related field, or equivalent practical experience.

• Experience:5+ years of progressive experience as an IAM Engineer, designing and implementing enterprise scale solutions with significant experience in supporting M&A integration projects preferred.

• Technical Expertise:

  • Proficiency in directory services (e.g., Active Directory, Azure AD, LDAP).
  • Extensive knowledge and experience with authentication standards and technologies such as SSO (SAML, OAuth, OpenID Connects and SCIM), MFA, and privileged access management (PAM).
  • Hands-on experience with leading IAM platforms (e.g., Okta, Microsoft Azure AD, CyberArk, ForgeRock, Ping Identity, SailPoint, ISC, Saviynt).
  • Experience with scripting languages (e.g., PowerShell, Python) for automation and integration.
  • Strong understanding of security principles, risk management, and access control models (e.g., RBAC).
  • Understanding of modern DevOps practices and SDLC processes.
  • Familiarity with Zero Trust architecture principles as they apply to remote and hybrid workforces.
  • Familiarity with AI/ML concepts and their practical application in security and risk management, especially in IAM context.
  • IAM Platforms: Hands-on experience with enterprise IdPs (e.g., Okta, Ping Identity, Azure AD/Entra ID).
  • Directory Services: Strong command of Active Directory, Azure AD, LDAP, and group policy management.
  • Scripting/Automation: Proficiency in PowerShell, Python, or bash for automating IAM tasks.
  • M&A Track Record: Proven experience migrating or merging user populations under tight deadlines. Strong communication and interpersonal skills to collaborate effectively with various teams and stakeholders.
  • Detail-oriented mindset to ensure precise access control configurations and compliance.
  • Excellent problem-solving and analytical abilities to troubleshoot access issues and design solutions for unique business requirements
  • Must be a self-starter who takes full ownership of projects from inception to completion , holding oneself accountable for the security and operation integrity of IAM platform.
  • Ability to manage multiple priorities and meet tight deadlines in a fast-paced M&A environment.
  • Adaptability to stay ahead of evolving IAM technologies and security threats.