Remote Senior IAM Architect: Workforce Identity & M&A

Cardinal Health; Lincoln (NE); Remote; USD 125,000 - 179,000; Full time

Benefits offered by this job

Medical, dental and vision coverage

Health savings account (HSA)

401k savings plan

Flexible spending accounts (FSAs)

Paid time off

Job summary

Cardinal Health is seeking an experienced IAM Senior Engineer to architect and scale identity across a hyper-scale, hybrid multi-cloud environment. You will lead M&A identity consolidation, drive ZSP/JIT controls, and implement enterprise SSO, IGA, and HRIS integrations to support 50,000+ users including non-human identities.

The role requires in-depth knowledge of Okta, Entra ID, SailPoint, and PAM systems, with a focus on secure, compliant access across global operations and distribution

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Information Security, or a related field, or equivalent practical experience.
• 10+ years in Information Security and Identity Management, with at least 5+ years operating as a Lead or Principal Enterprise IAM Architect within a Fortune 500 or hyper-scale enterprise preferred.
• Deep theoretical and practical command of OAuth 2.0, OpenID Connect (OIDC), SAML 2.0, SCIM 2.0, FIDO2/WebAuthn, and Kerberos.

Responsibilities

• Define enterprise IAM architecture standards: Formulate technical standards, architectural patterns, and reference blueprints for enterprise SSO, IGA, and directory services.
• Technical authority and vendor SoW evaluation: Evaluate third-party integration patterns and high-complexity migrations (e.g., ADFS to Okta).
• Hybrid and multi-cloud IAM: Design secure identity bridges linking on-prem AD/ADFS with cloud providers and SaaS ecosystems.
• Privileged Access and JIT governance: Define Zero Standing Privilege and Just-In-Time access control patterns.
• Automation and workflows: Build API-driven automations and IaC for IAM configurations.
• Security policy and compliance: Ensure IAM systems comply with GDPR, HIPAA, SOX; document procedures.

Skills

OAuth 2.0

OpenID Connect

SAML 2.0

SCIM 2.0

FIDO2/WebAuthn

Kerberos

Microsoft Entra ID

Okta

Ping

IGA

SailPoint IdentityIQ

Identity Security Cloud

PAM

CyberArk

HashiCorp Vault

CIEM

Workday integration

SuccessFactors integration

PeopleSoft integration

Education

Bachelor's degree in Computer Science

Information Security degree or related field

Tools

Okta

Entra ID

Ping

Active Directory

ADFS

SailPoint

CyberArk

HashiCorp Vault

Job description

Cardinal Health is seeking an experienced IAM Senior Engineer to architect and scale identity across a hyper-scale, hybrid multi-cloud environment. You will lead M&A identity consolidation, drive ZSP/JIT controls, and implement enterprise SSO, IGA, and HRIS integrations to support 50,000+ users including non-human identities.

The role requires in-depth knowledge of Okta, Entra ID, SailPoint, and PAM systems, with a focus on secure, compliant access across global operations and distribution