Azure IAM & CIAM Engineer

CVS Health; Sacramento (CA); On-site; USD 65,000 - 173,000; Full time

Job summary

CVS Health is seeking an Identity and Access Management Engineer in Sacramento, CA to design, implement, and support secure identity capabilities across workforce, cloud, and CIAM environments.

Key focus includes building a robust CIAM capability, integrating customer identity services with applications and APIs using OAuth 2.0 and OpenID Connect, while balancing security, privacy, and user experience at scale.

Qualifications

• 3+ years in Identity & Access Management or related security engineering.
• 3+ years with Microsoft Entra ID and Azure identity services.
• 3+ years implementing CIAM or external/customer identity solutions.
• 3+ years implementing enterprise SSO, MFA, Conditional Access, RBAC, federation.
• 3+ years with OAuth 2.0, OpenID Connect (OIDC), SAML, tokens and federation.
• 2+ years integrating IAM with enterprise apps, APIs, and cloud-native apps.

Responsibilities

• Design, implement, and support IAM solutions using Entra ID and Azure.
• Engineer authentication, authorization, federation, SSO, and RBAC controls.
• Support hybrid identity integrations between Entra ID, AD, cloud platforms, and SaaS apps.
• Implement secure identity lifecycle processes including provisioning and deprovisioning.
• Support privileged access controls including PIM and least-privilege models.
• Collaborate with security, cloud, and dev teams to deliver identity solutions.

Skills

IAM engineering

Azure Entra ID

OAuth 2.0

OIDC

SAML

RBAC

SSO

MFA

PIM

Terraform

PowerShell

Python

APIs integration

Education

Bachelor's degree in CS/IT/Engineering or related

Tools

Microsoft Entra ID

Azure

Terraform

PowerShell

Python

Microsoft Graph

Job description

CVS Health is seeking an Identity and Access Management Engineer in Sacramento, CA to design, implement, and support secure identity capabilities across workforce, cloud, and CIAM environments.

Key focus includes building a robust CIAM capability, integrating customer identity services with applications and APIs using OAuth 2.0 and OpenID Connect, while balancing security, privacy, and user experience at scale.