Azure IAM Engineer: CIAM & Secure Access

CVS Health; Harrisburg (Dauphin County); On-site; USD 65,000 - 173,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

Paid time off

Retirement savings options

Wellness programs

Job summary

CVS Health is seeking an Identity and Access Management Engineer to shape a robust CIAM and enterprise IAM program. You will design authentication, authorization, and federation patterns across Azure environments and integrate customer identity services with applications and APIs.

The role emphasizes secure identity lifecycle management, PIM, least privilege, and scalable identity governance, collaborating with security, cloud, and development teams to deliver reliable identity solutions.

Qualifications

• 3+ years of experience in Identity & Access Management, security engineering, cloud engineering, or a related discipline.
• 3+ years of hands-on experience with Microsoft Entra ID and Azure identity services.
• 3+ years of experience implementing CIAM or external/customer identity solutions.
• 3+ years of experience implementing enterprise SSO, MFA, Conditional Access, RBAC, federation, and identity lifecycle management.
• 3+ years with OAuth 2.0, OpenID Connect (OIDC), SAML, authentication, authorization, tokens, and federation.
• 2+ years of experience integrating IAM capabilities with enterprise web applications, APIs, and cloud-native applications.
• 2+ years of experience working with APIs, scripting, or automation technologies such as Microsoft Graph, PowerShell, Python, or Terraform.

Responsibilities

• Design, implement, and support identity and access solutions using Microsoft Entra ID and Azure.
• Engineer authentication, authorization, federation, SSO, MFA, Conditional Access, and role-based access control solutions.
• Support hybrid identity integrations between Microsoft Entra ID, Active Directory, cloud platforms, SaaS applications, and enterprise applications.
• Implement secure identity lifecycle processes supporting provisioning, access changes, and deprovisioning.
• Design and support privileged access controls, including Privileged Identity Management (PIM) and least-privilege access models.
• Implement service principal, workload identity, managed identity, and application identity controls within Azure environments.
• Support identity governance activities including access reviews, entitlement management, role governance, and remediation of excessive access.

Skills

Identity & Access Management

Azure identity services

OAuth 2.0

OIDC

SAML

RBAC

MFA

Conditional Access

APIs integration

Education

Bachelor's degree (CS/IT/Cybersecurity/Engineering)

Tools

Microsoft Entra ID

Azure

PowerShell

Terraform

Microsoft Graph

Job description

CVS Health is seeking an Identity and Access Management Engineer to shape a robust CIAM and enterprise IAM program. You will design authentication, authorization, and federation patterns across Azure environments and integrate customer identity services with applications and APIs.

The role emphasizes secure identity lifecycle management, PIM, least privilege, and scalable identity governance, collaborating with security, cloud, and development teams to deliver reliable identity solutions.