Cloud Engineer

Cardinal Health; United States; On-site; USD 96,000 - 138,000; Full time

Benefits offered by this job

Medical, dental and vision coverage

Paid time off

Health savings account (HSA)

401k savings plan

Job summary

Cardinal Health seeks an Active Directory Engineer to oversee the enterprise AD and Microsoft identity infrastructure, ensuring secure authentication, authorization, and Zero Trust initiatives. This role partners with IAM, Platform Engineering, and Security to modernize directory services and automate tasks using PowerShell.

The engineer will support Entra ID integration, GPO deployment, and PKI services, while contributing to platform resiliency and governance compliant with SOX, HIPAA, PCI,

Qualifications

• 4–8 years of experience in directory services or IAM.
• Bachelor's degree or equivalent work experience preferred.

Responsibilities

• Administer Active Directory Domain Services (AD DS) and AD LDS.
• Manage Entra ID integration and PKI services (AD CS).
• Design and implement Group Policy Objects (GPOs).
• Maintain DNS and DHCP; support directory services operations.
• Develop automation with PowerShell and integrate with REST/Graph APIs.

Skills

Active Directory

Entra ID

Group Policy

LDAP

PowerShell

Education

Bachelor's degree in related field

Tools

Microsoft Graph APIs

REST APIs

JSON/XML

PowerShell scripting

Job description

What Cloud Engineering contributes to Cardinal Health Information Technology oversees the effective development, delivery, and operation of computing and information services. This function anticipates, plans, and delivers Information Technology solutions and strategies that enable operations and drive business value. Cloud Engineering analyzes the financial, operational, and technical feasibility of adopting external cloud based IT software, platform and infrastructure services. This job family evaluates the costs and benefits of cloud, virtual private networks, dedicated housing, and in-house solutions and identifies portions of the organization’s IT infrastructure with the highest potential return for cloud deployment. Cloud Engineering also manages the implementation of cloud services and their integration with in-house applications and systems, coordinating with vendors and adhering to engineering best practices.

Position Summary, Active Directory Engineer

The Active Directory Engineer is responsible for the engineering, administration, maintenance, modernization, and operational resiliency of the enterprise Active Directory and Microsoft identity infrastructure. This role partners with Infrastructure, Security, IAM, Platform Engineering, Application Teams, and Architecture teams to provide secure and reliable directory services that support authentication, authorization, privileged access, identity lifecycle management, and Zero Trust initiatives. The engineer serves as a subject matter expert for Active Directory Domain Services (AD DS), Entra ID integration, Group Policy, LDAP services, Active Directory Certificate Services (AD CS), and identity-related automation. The role supports modernization efforts, operational excellence, platform resiliency, and identity security initiatives aligned to the organization's IAM strategy and Platform Engineering objectives.

Responsibilities

Active Directory Platform Administration Install, configure, administer, and maintain: Active Directory Domain Services (AD DS) Active Directory Lightweight Directory Services (AD LDS) Microsoft Entra ID integration Active Directory Certificate Services (AD CS) Group Policy infrastructure DNS and DHCP services supporting AD Hybrid identity synchronization services Perform platform upgrades, migrations, patch management, and lifecycle management. Monitor AD health, replication, authentication services, and directory performance. Manage domain controllers, forests, domains, trusts, sites, and services. Support directory consolidation, modernization, and cloud identity initiatives. Develop standards for directory services architecture and operational support.

Directory Services & Identity Infrastructure Administer users, groups, organizational units (OUs), and directory permissions. Design and implement Group Policy Objects (GPOs). Maintain Active Directory delegation models. Support enterprise authentication services relying on LDAP, Kerberos, NTLM, and SAML. Administer service accounts and managed service accounts. Support certificate-based authentication and PKI integrations. Maintain naming standards, OU structures, and directory governance.

Automation & Engineering Develop PowerShell-based automation solutions. Create and maintain automation for: User lifecycle management Group management Service account governance GPO deployment AD health monitoring Certificate lifecycle management Develop integrations using: PowerShell, REST APIs, LDAP and Microsoft Graph APIs Support Infrastructure-as-Code and platform automation initiatives where applicable.

Service Now Developer a plus Compliance & Governance Support SOX, HIPAA, PCI, NIST, and internal security controls. Assist with audit evidence collection and compliance reviews. Maintain technical documentation, standards, and operational procedures. Participate in risk assessments and remediation efforts. Support policy enforcement through Group Policy and directory controls.

Emerging Identity Capabilities Support Zero Trust identity initiatives. Enable passwordless authentication. Support Entra ID modernization and cloud identity transformation. Enhance automation of directory services operations. Support identity telemetry, security analytics, and operational reporting. Participate in Non-Human Identity (NHI) governance initiatives where directory services are involved.

Directory Services

Active Directory Domain Services (AD DS) Active Directory Lightweight Directory Services (AD LDS) LDAP, Kerberos, NTLM Forest and Domain Administration Trust Relationships Replication and Sites & Services Automation PowerShell (Advanced), Microsoft Graph APIs, REST APIs, JSON/XML Infrastructure Automation and Workflow Automation

Qualifications

4-8 years of experience, preferred Bachelor's degree in related field, or equivalent work experience, preferred

Typical KPIs

Active Directory platform availability (99.9%+) Domain controller health and replication success rate GPO compliance rate AD-related incident reduction and resolution times Successful completion of platform upgrades and modernization efforts Service account governance compliance Audit findings related to directory services Mean Time to Resolve (MTTR) for AD incidents Entra synchronization success rate Reduction in manual directory administration activities Automation adoption and time savings

Future-State Focus for IAM Organization

The Active Directory Engineer role is expected to focus on: Active Directory and Entra platform engineering. Directory modernization and cloud identity integration. AD and IAM platform resiliency. Identity infrastructure automation and PowerShell development. LDAP and directory service lifecycle management. AD integration with Okta, SailPoint, CyberArk, and enterprise applications. Platform operational excellence, governance, and compliance. AD support for Zero Trust, passwordless authentication, and identity modernization initiatives

What is expected of you and others at this level

Applies comprehensive knowledge and a thorough understanding of concepts, principles, and technical capabilities to perform varied tasks and projects May contribute to the development of policies and procedures Works on complex projects of large scope Develops technical solutions to a wide range of difficult problems Solutions are innovative and consistent with organization objectives Completes work; independently receives general guidance on new projects Work reviewed for purpose of meeting objectives May act as a mentor to less experienced colleagues

Anticipated salary range

$96,300 - $137,600 Bonus eligible: No Benefits: Cardinal Health offers a wide variety of benefits and programs to support health and well-being. Medical, dental and vision coverage Paid time off plan Health savings account (HSA) 401k savings plan Access to wages before pay day with myFlexPay Flexible spending accounts (FSAs) Short- and long-term disability coverage Work-Life resources Paid parental leave Healthy lifestyle programs Application window anticipated to close: 11/23/2026 *if interested in opportunity, please submit application as soon as possible. The salary range listed is an estimate. Pay at Cardinal Health is determined by multiple factors including, but not limited to, a candidate’s geographical location, relevant education, experience and skills and an evaluation of internal pay equity

Cardinal Health supports an inclusive workplace that values diversity of thought, experience and background. We celebrate the power of our differences to create better solutions for our customers by ensuring employees can be their authentic selves each day. Cardinal Health is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state or local law.

Headquartered in Dublin, Ohio, Cardinal Health, Inc. (NYSE: CAH) is a distributor of pharmaceuticals, a global manufacturer and distributor of medical and laboratory products, and a provider of performance and data solutions for healthcare facilities. We are a crucial link between the clinical and operational sides of healthcare, delivering end‑to‑end solutions and data‑driving insights that advance healthcare and improve lives every day. With deep partnerships, diverse perspectives and innovative digital solutions, we build connections across the continuum of care. With more than 50 years of experience, we seize the opportunity to address healthcare's most complicated challenges — now, and in the future.

To read and review this privacy notice click here. If your personal information has changed and needs edited, please contact your recruiter for assistance. If you have not yet been contacted by a recruiter, please email us at [e-mail] for assistance.