Remote IAM Engineer - SSO & M&A Lead

Cardinal Health; Phoenix (AZ); Remote; USD 96,000 - 151,000; Full time

Benefits offered by this job

Medical coverage

Dental coverage

Vision coverage

Paid time off

HSA

401k

Job summary

Cardinal Health is seeking an experienced IAM Engineer to design and implement enterprise-scale security identities and access controls across AD, Entra ID, and multiple IdPs. You will lead M&A integration workstreams, consolidate IdPs into a unified SSO, and build automated workflows with IaC for scalable identity management.

The role requires hands-on scripting, RBAC design, and risk-based authentication knowledge, with collaboration across Security, IT Ops, HR, and Dev teams.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Information Security, or related field, or equivalent practical experience.
• 5+ years of progressive experience as an IAM Engineer, designing and implementing enterprise scale solutions with significant experience in supporting M&A integration projects preferred.
• Strong command of Active Directory, Microsoft Entra ID, LDAP, and Group Policy management.
• Extensive knowledge of authentication and authorization standards (SAML, OAuth, OIDC, and SCIM).
• Hands-on experience with enterprise IdPs and governance suites such as Okta, Ping Identity, Microsoft Entra ID, CyberArk, SailPoint, or ForgeRock.
• Proficiency in scripting languages (PowerShell, Python, or Bash) for automation, API integrations, and lifecycle management.
• Solid understanding of Zero Trust architecture, Least Privilege, RBAC, and modern DevOps practices/SDLC.
• Familiarity with AI/ML concepts and their application to risk-based authentication and user behavior analytics.

Responsibilities

• Lead IAM technical workstreams for Mergers, Acquisitions, and Divestitures.
• Consolidate disparate identity providers into a unified enterprise SSO platform.
• Design and execute cross-domain authentication and federation strategies for user population migrations.
• Design, implement, and maintain scalable IAM solutions including SSO, LCM, IGA, and PAM.
• Develop automated workflows and API-driven integrations for onboarding, transitions, and offboarding.
• Implement infrastructure-as-code principles for IAM platform configuration.
• Design and enforce SSO security policies, MFA, Least Privilege, conditional Access, and RBAC.
• Troubleshoot and provide Tier 3 engineering support for IAM issues.

Skills

AD/Entra ID

LDAP

Group Policy

SAML

OAuth

OIDC

SCIM

Okta

Ping Identity

Entra ID governance

PowerShell

Python

Education

Bachelor's degree in CS/IT/InfoSec

Tools

Okta

Ping Identity

Microsoft Entra ID

CyberArk

SailPoint

ForgeRock

Job description

Cardinal Health is seeking an experienced IAM Engineer to design and implement enterprise-scale security identities and access controls across AD, Entra ID, and multiple IdPs. You will lead M&A integration workstreams, consolidate IdPs into a unified SSO, and build automated workflows with IaC for scalable identity management.

The role requires hands-on scripting, RBAC design, and risk-based authentication knowledge, with collaboration across Security, IT Ops, HR, and Dev teams.