Azure IAM Engineer — CIAM & Entra Identity Specialist

CVS Health; Saint Paul (MN); Vor Ort; USD 65.000 - 173.000; Vollzeit

Benefits dieser Stelle

Comprehensive benefits package

Bonus eligibility

Zusammenfassung

CVS Health is seeking an Identity and Access Management Engineer to design and implement IAM across workforce, cloud, and CIAM for customer-facing apps. You will work with Azure Entra ID, SSO, MFA, and RBAC to balance security with customer experience.

You will collaborate with application teams to integrate authentication into architectures, support governance, and automate provisioning and deprovisioning. The role emphasizes scalable IAM in healthcare contexts.

Qualifikationen

• 3+ years of Identity & Access Management, security engineering, cloud engineering, or related discipline.
• 3+ years with Microsoft Entra ID and Azure identity services.
• 3+ years implementing CIAM or external/customer identity solutions.
• 3+ years implementing enterprise SSO, MFA, Conditional Access, RBAC, federation, and identity lifecycle management.
• 3+ years with OAuth 2.0, OpenID Connect (OIDC), SAML, authentication, authorization, tokens, and federation.
• 2+ years of experience integrating IAM capabilities with enterprise web applications, APIs, and cloud-native applications.
• 2+ years of experience working with APIs, scripting, or automation technologies such as Microsoft Graph, PowerShell, Python, or Terraform.

Aufgaben

• Design, implement, and support identity and access solutions using Microsoft Entra ID and Azure.
• Engineer authentication, authorization, federation, SSO, MFA, Conditional Access, and role-based access control solutions.
• Support hybrid identity integrations between Microsoft Entra ID, Active Directory, cloud platforms, SaaS applications, and enterprise applications.
• Implement secure identity lifecycle processes supporting provisioning, access changes, and deprovisioning.
• Design and support privileged access controls, including Privileged Identity Management (PIM) and least-privilege access models.
• Implement service principal, workload identity, managed identity, and application identity controls within Azure environments.
• Support identity governance activities including access reviews, entitlement management, role governance, and remediation of excessive access.
• Design, implement, and support CIAM solutions for customer-facing web, mobile, and digital applications.
• Implement secure customer registration, sign-in, authentication, account recovery, and identity lifecycle patterns.
• Integrate customer identity services with applications and APIs using standards including OAuth 2.0 and OpenID Connect (OIDC).
• Partner with application engineering teams to integrate authentication and authorization into application architectures.
• Support federation and external identity integrations across customer and partner ecosystems.
• Troubleshoot complex login, token, federation, authorization, and application integration issues.
• Ensure CIAM implementations balance security, customer experience, availability, scalability, and privacy requirements.

Kenntnisse

IAM

Azure Entra ID

OAuth 2.0 / OIDC

SAML

MFA

RBAC

CIAM

Cloud engineering

APIs

Scripting/Automation

Ausbildung

Bachelor's degree in Computer Science, IT, Cybersecurity, Engineering

Tools

Terraform

PowerShell

Microsoft Graph

APIs

Jobbeschreibung

CVS Health is seeking an Identity and Access Management Engineer to design and implement IAM across workforce, cloud, and CIAM for customer-facing apps. You will work with Azure Entra ID, SSO, MFA, and RBAC to balance security with customer experience.

You will collaborate with application teams to integrate authentication into architectures, support governance, and automate provisioning and deprovisioning. The role emphasizes scalable IAM in healthcare contexts.