Senior IAM Architect — Enterprise Identity & M&A

Cardinal Health, Inc.; Oregon; Hybrid; USD 125,000 - 179,000; Full time

Benefits offered by this job

Medical, dental and vision coverage

401(k) plan

HSA

Paid time off

Work‑Life resources

Job summary

Cardinal Health is seeking an experienced Identity and Access Management Senior Engineer to architect, scale, and modernize secure identities across a global workforce. You will lead M&A identity workstreams, consolidate disparate identity providers, and design cross‑cloud federation to support hybrid environments.

The role emphasizes Zero Standing Privilege, Just‑In‑Time access, and integration with PAM, CAE, and CIEM tools while aligning with SOX, HIPAA, and GDPR requirements.

Qualifications

• 10+ years in Information Security and Identity Management.
• 5+ years as Lead or Principal Enterprise IAM Architect in a Fortune 500 or hyper‑scale enterprise preferred.
• Deep knowledge of OAuth 2.0, OpenID Connect, SAML 2.0, SCIM 2.0, FIDO2/WebAuthn, Kerberos.
• Experience across IdPs (Microsoft Entra ID, Okta) and IGA/PAM platforms.
• Familiarity with SOX ITGC controls, HIPAA, and data sovereignty frameworks.
• Strong executive communication and stakeholder diplomacy.

Responsibilities

• Lead IAM architecture for enterprise-scale M&A integrations.
• Define standards for enterprise SSO, IGA, and directory services.
• Architect hybrid/multi-cloud IAM bridges with on-prem AD/ADFS.
• Drive cross-domain authentication, federation, and cross-cloud governance.
• Collaborate with HR, IT, Security, and Application teams to implement IAM programs.

Skills

OAuth 2.0

OIDC

SAML 2.0

SCIM 2.0

FIDO2/WebAuthn

Kerberos

Executive communication

IAM architecture

M&A identity integration

RBAC/PBAC

Education

Bachelor's degree in CS/IT/InfoSecurity

Tools

SailPoint IdentityIQ

CyberArk

HashiCorp Vault

Okta

Microsoft Entra ID

Job description

Cardinal Health is seeking an experienced Identity and Access Management Senior Engineer to architect, scale, and modernize secure identities across a global workforce. You will lead M&A identity workstreams, consolidate disparate identity providers, and design cross‑cloud federation to support hybrid environments.

The role emphasizes Zero Standing Privilege, Just‑In‑Time access, and integration with PAM, CAE, and CIEM tools while aligning with SOX, HIPAA, and GDPR requirements.