IAM Platform Engineer — Automation & AI

AmerisourceBergen Corporation (Cencora); Conshohocken (Montgomery County); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Comprehensive benefits

Training and development programs

Job summary

Cencora seeks an experienced IAM specialist to design, implement, and continuously enhance enterprise IAM platforms with automation, orchestration, and AI-enabled capabilities. You will partner with cybersecurity, cloud, and application teams to deliver scalable identity solutions across the organization.

You will lead automation of identity lifecycle, governance, and access management, while advancing SSO, MFA, and PAM programs within a Zero Trust framework.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Software Engineering, Data Science, or related field, or equivalent experience.
• 4+ years of IAM, platform engineering, software development, cybersecurity engineering, cloud engineering, or related field.
• Hands-on experience building IAM automation solutions using scripting, APIs, workflow orchestration tools, or Infrastructure-as-Code technologies.
• Experience with enterprise IAM platforms such as SailPoint, Saviynt, Okta, Microsoft Entra ID, CyberArk, Ping Identity, ForgeRock, BeyondTrust, or similar technologies.
• Experience developing solutions using PowerShell, Python, JavaScript, Terraform, REST APIs, or comparable automation technologies.
• Strong understanding of identity standards and protocols including OAuth 2.0, OpenID Connect (OIDC), SAML, SCIM, LDAP, and JWT.
• Experience supporting Identity Governance (IGA), Access Management, Privileged Access Management (PAM), Single Sign-On (SSO), and Multi-Factor Authentication (MFA) solutions.

Responsibilities

• Designs, implements, and maintains enterprise-scale IAM platforms and directory services for secure, highly available authentication and authorization.
• Develops and deploys automation solutions for identity lifecycle processes including provisioning, deprovisioning, access requests, reviews, PAM onboarding, and compliance reporting.
• Creates and supports API-driven integrations, identity orchestration workflows, and automated provisioning to connect applications, cloud services, and identity platforms.
• Utilizes AI-powered tools and analytics to improve access governance, threat detection, and operational efficiency.
• Analyzes identity telemetry and logs to identify security risks and optimize service delivery.
• Documents architecture, standards, automation frameworks, and runbooks for IAM across the ecosystem.
• Collaborates with security, cloud, infrastructure, and application teams to implement SSO, MFA, PAM, IGA, and Zero Trust initiatives.
• Validates upgrades, automation enhancements, and security controls before production deployment.
• Evaluates emerging IAM, automation, AI, and cybersecurity technologies for innovation and risk reduction.
• Provides technical leadership and mentorship on IAM best practices and modern identity patterns.

Skills

IAM automation

Scripting

APIs

Workflow orchestration

Infrastructure-as-Code

Education

Bachelor's degree in CS/IT/Cybersecurity/SE/Data Science or related field

Tools

SailPoint

Saviynt

Okta

Microsoft Entra ID

CyberArk

Ping Identity

ForgeRock

BeyondTrust

Job description

Cencora seeks an experienced IAM specialist to design, implement, and continuously enhance enterprise IAM platforms with automation, orchestration, and AI-enabled capabilities. You will partner with cybersecurity, cloud, and application teams to deliver scalable identity solutions across the organization.

You will lead automation of identity lifecycle, governance, and access management, while advancing SSO, MFA, and PAM programs within a Zero Trust framework.