Remote IAM Engineer | SSO & Automation Expert

Cardinal Health; Boston (MA); Remote; USD 96,000 - 151,000; Full time

Benefits offered by this job

Medical, dental and vision coverage

Paid time off plan

401k savings plan

Health savings account (HSA)

Paid parental leave

Job summary

Cardinal Health is hiring an IAM Engineer to lead M&A and SSO efforts, consolidate IdPs, and design scalable IAM solutions. You will automate onboarding/offboarding, implement IaC for IAM configurations, and collaborate across teams to enforce security policies. This role emphasizes end-to-end responsibility in a large enterprise.

You will work in a remote US-wide environment, focusing on least privilege, RBAC, and modern DevOps practices within a mature security program.

Qualifications

• Bachelor's degree in CS, IT, Information Security, or related field.
• 5+ years as an IAM Engineer on enterprise-scale projects.
• Strong command of AD, Entra ID, LDAP, and Group Policy management.

Responsibilities

• Lead IAM workstreams for Mergers, Acquisitions, and Divestitures.
• Consolidate disparate identity providers (IdPs) into a unified enterprise SSO platform.
• Design cross-domain authentication and federation strategies for migration of user populations.
• Design, implement, and maintain scalable IAM solutions including SSO, LCM, IGA, and PAM.
• Develop automated workflows and API-driven integrations for onboarding/offboarding (LCM).
• Implement IaC principles for IAM configuration management.

Skills

Active Directory

Entra ID

LDAP

SAML

OAuth

SCIM

PowerShell

Python

RBAC

Zero Trust

Automation

Education

Bachelor's degree in CS/IT/Security

Tools

Okta

Ping Identity

ForgeRock

CyberArk

SailPoint

Job description

Cardinal Health is hiring an IAM Engineer to lead M&A and SSO efforts, consolidate IdPs, and design scalable IAM solutions. You will automate onboarding/offboarding, implement IaC for IAM configurations, and collaborate across teams to enforce security policies. This role emphasizes end-to-end responsibility in a large enterprise.

You will work in a remote US-wide environment, focusing on least privilege, RBAC, and modern DevOps practices within a mature security program.