Remote Senior IAM Architect: Global Identity Leadership

Cardinal Health, Inc.; Lansing (MI); Remote; USD 140,000 - 185,000; Full time

Job summary

Cardinal Health, Inc. is seeking a senior Identity and Access Management (IAM) Engineer to architect and modernize identity across a hyper‑scale hybrid/multi‑cloud environment.

You will drive M&A identity integrations, implement robust SSO/IGA pipelines, and steward governance with a focus on secure privileged access. You will lead cross‑domain identity consolidation across Okta, Entra ID, Ping, and enterprise directories, while ensuring compliance with SOX ITGC, HIPAA, and GDPR.

Qualifications

• Experience designing enterprise IAM architecture including SSO, IGA, and PAM.
• Demonstrated ability to lead cross‑domain identity consolidations (Okta, Entra ID, Ping).
• Experience with regulatory compliance (SOX ITGC, HIPAA, GDPR) in IAM programs.

Responsibilities

• Architect repeatable IAM blueprints for M&A/Divestitures and cross‑domain federation.
• Lead IAM workstreams for mergers and acquisitions, consolidating IdPs.
• Design, implement and govern cross‑cloud IAM bridges between on‑prem AD/ADFS and cloud providers (GCP/AWS/Azure).
• Define policies for RBAC/PBAC, SoD, and Just‑In‑Time access.
• Collaborate with HRMS (Workday/SuccessFactors/PeopleSoft) integrations for lifecycle management.
• Drive automation: provisioning, lifecycle events, and self‑service access.

Skills

IAM architecture

ZSP

M&A IAM

Federation

RBAC/PBAC

PAM

CIEM

SailPoint

Okta

Entra ID

Hybrid cloud

Strategic thinking

Tools

Active Directory

ADFS

Okta

Entra ID

Ping

SailPoint

Workday

Job description

Cardinal Health, Inc. is seeking a senior Identity and Access Management (IAM) Engineer to architect and modernize identity across a hyper‑scale hybrid/multi‑cloud environment.

You will drive M&A identity integrations, implement robust SSO/IGA pipelines, and steward governance with a focus on secure privileged access. You will lead cross‑domain identity consolidation across Okta, Entra ID, Ping, and enterprise directories, while ensuring compliance with SOX ITGC, HIPAA, and GDPR.