Senior Engineer, Workforce IAM

Cardinal Health; Field (KY); Hybrid; USD 140.000 - 190.000; Vollzeit

Zusammenfassung

Cardinal Health is seeking a senior Identity and Access Management (IAM) Engineer to architect, scale, and modernize security for 50,000+ global employees and critical operations. You will lead cross-cloud federation, M&A identity integration, and Zero Standing Privilege initiatives in a hybrid multi-cloud environment.

Responsibilities include defining enterprise IAM standards, evaluating vendor solutions, and driving consolidation of diverse IdPs (Okta, Entra ID, Ping) to a unified SSO

Qualifikationen

• Proven senior IAM experience in large, hybrid/multi-cloud environments.
• Experience architecting enterprise SSO, IGA, and directory services.
• Strong ability to lead cross-domain identity consolidation and migrations.
• Familiarity with modern identity trends (NHIM, ISPM).

Aufgaben

• Architect repeatable IAM blueprints for Mergers, Acquisitions, and Divestitures.
• Lead cross-domain identity consolidation across IdPs and directories.
• Design cross-cloud federation, B2B collaboration, and tenant boundary governance.
• Lead IAM workstreams for M&A, consolidations, and decommissioning of legacy platforms.
• Drive discovery, migration, and consolidation for new acquisitions.
• Define technical standards for enterprise IAM architecture and reference blueprints.

Kenntnisse

IAM expertise

ZSP / PAM concepts

Multi-cloud IAM

SSO / Federation

M&A IAM integration

IdP consolidation

Security architecture

Tools

Okta

Entra ID

Ping Identity

ADFS

CyberArk

HashiCorp Vault

Jobbeschreibung

Cardinal Health, Inc. (NYSE: CAH) is a global healthcare services and products company. We provide customized solutions for hospitals, healthcare systems, pharmacies, ambulatory surgery centers, clinical laboratories, physician offices and patients in the home. We are a distributor of pharmaceuticals and specialty products; a global manufacturer and distributor of medical and laboratory products; an operator of nuclear pharmacies and manufacturing facilities; and a provider of performance and data solutions. Working to be healthcare's most trusted partner, our customer-centric focus drives continuous improvement and leads to innovative solutions that improve the lives of people every day. With approximately 50,000 employees worldwide, Cardinal Health ranks among the top fifteen in the Fortune 500.

Department Overview: Information Security and Risk develops, implements, and enforces security controls to protect the organization's technology assets from intentional or inadvertent modification, disclosure, or destruction. The function of this job family is to ensure secure, authorized, and compliant access to the organization's data, systems, and physical resources . It focuses on defining, creating, managing, and governing digital identities and their associated access privileges to protect the enterprise from security breaches, insider threats, and regulatory non-compliance

We are seeking a highly skilled and experienced Identity and Access Management (IAM) Senior Engineer to join our Workforce Identity team. In this role, you will architect, scale, and modernize the systems that secure over 50,000 global employees, contractors, and critical distribution operations. You will drive identity strategy across a hyper-scale, hybrid multi-cloud environment, spearhead rapid M&A integrations, champion Zero Standing Privilege (ZSP), and architect next-generation non-human and frontline identity solutions.

Responsibilities

M&A Architecture & Federation Strategy

• Architect repeatable, high-velocity identity blueprints for Mergers, Acquisitions, and Divestitures, reducing subsidiary integration timeframes from months to weeks.
• Lead cross-domain identity consolidation across disparate identity providers (Okta, Entra ID, Ping) and divergent enterprise directories.
• Design robust cross-cloud federation, B2B collaboration frameworks, and tenant boundary governance.
• Lead IAM technical workstreams for Mergers, Acquisitions, and Divestitures. Consolidate disparate identity providers (IdPs) into a unified enterprise SSO platform. Design and execute cross-domain authentication and federation strategies.
• Lead IAM discovery, identity migration, and system consolidation for newly acquired business entities.
• Direct experience migrating users, mapping attributes, and consolidating divergent directories.

Architecture influence and decision-making

• Define enterprise IAM architecture standards: Formulate technical standards, architectural patterns, and reference blueprints for enterprise SSO, Identity Governance and Administration (IGA), and directory services.
• Technical authority and vendor SoW evaluation: Act as a critical architectural authority to evaluate third-party integration patterns, challenge vendor Statements of Work (SoWs) for high-complexity migrations (e.g., ADFS to Okta) and establish technical decommissioning strategies for legacy identity platforms.

Hybrid and multi-cloud IAM

• Architect hybrid and multi-cloud IAM bridges: Design, govern, and scale secure identity bridges linking legacy on-premises infrastructure (Active Directory, ADFS) with hyper-scale multi-cloud environments (GCP, AWS, Azure/Entra ID) and SaaS ecosystems (Okta, SailPoint).
• Privileged Access and JIT governance: Define and architect robust Zero Standing Privilege (ZSP) and Just-In-Time (JIT) access control patterns using Privileged Access Management (PAM - CyberArk, HashiCorp Vault) and Cloud Infrastructure Entitlement Management (CIEM) to reduce the on-premises and cloud attack surface.

Emerging tech trends and business growth

• Modern Identity roadmaps (NHIM and ISPM): Research, evaluate, and integrate emerging industry trends-such as Non-Human Identity Management (NHIM), Identity Security Posture Management (ISPM), and agentic/AI security controls-into the long-term IAM roadmap.
• Agile Identity for business scale: Ensure identity systems are agile and scalable enough to support Cardinal Health's rapid business expansion, M&A pipeline, and digital healthcare operations without introducing friction

IGA Integrations

• Design repeatable, high-velocity identity blueprints for Mergers, Acquisitions, and Divestitures, reducing subsidiary integration timeframes from months to weeks.
• Lead cross-domain identity consolidation across disparate identity providers (Okta, Entra ID, Ping) and divergent enterprise directories.
• Design robust cross-cloud federation, B2B collaboration frameworks, and tenant boundary governance
• Authoritative Source Integration: Design an