Remote IAM Engineer - Enterprise Identity & Access

Cardinal Health; Annapolis (MD); Remote; USD 96,000 - 151,000; Full time

Benefits offered by this job

Medical, dental and vision

401k savings plan

HSA

Paid time off

Parental leave

Job summary

Cardinal Health, Inc. is seeking an experienced IAM Engineer to lead secure identity management across a nationwide remote environment.

The role focuses on consolidating identity providers, implementing SSO, and governing access controls for enterprise systems. You will work with AD, Microsoft Entra ID, and various IAM platforms (Okta, Ping Identity, CyberArk, SailPoint, ForgeRock) to design safe, scalable solutions and automate lifecycle management.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Information Security or related field, or equivalent practical experience.
• 5+ years of progressive IAM Engineer experience designing and implementing enterprise-scale solutions.
• Experience supporting M&A integration projects preferred.

Responsibilities

• Lead M&A and SSO integration workstreams; consolidate IdPs into a unified enterprise SSO platform.
• Design and implement cross-domain authentication and federation strategies for timely migrations.
• Develop scalable IAM solutions including SSO, Identity Lifecycle Management, IAM governance, and PAM.
• Automate workflows and API-driven integrations to streamline onboarding, transitions, and offboarding.

Skills

Ownership Mindset

Analytical Problem Solving

Communication

Scripting & Automation

Security Fundamentals

Education

Bachelor's degree in Computer Science / Information Security

Tools

Active Directory

Microsoft Entra ID

LDAP

Okta

Ping Identity

CyberArk

SailPoint

ForgeRock

Job description

Cardinal Health, Inc. is seeking an experienced IAM Engineer to lead secure identity management across a nationwide remote environment.

The role focuses on consolidating identity providers, implementing SSO, and governing access controls for enterprise systems. You will work with AD, Microsoft Entra ID, and various IAM platforms (Okta, Ping Identity, CyberArk, SailPoint, ForgeRock) to design safe, scalable solutions and automate lifecycle management.