Senior IAM Architect – Global Workforce, M&A & ZSP

Cardinal Health; Denver (CO); Remote; USD 125,000 - 179,000; Full time

Benefits offered by this job

Medical, dental and vision coverage

401k savings plan

Paid time off

Job summary

Cardinal Health is seeking an experienced Identity and Access Management (IAM) Senior Engineer to lead the Workforce Identity team. You will architect, scale, and modernize systems securing 50,000+ global employees, contractors, and critical operations.

Drive identity strategy across a hyper-scale, hybrid multi-cloud environment and enable Zero Standing Privilege and JIT access patterns. Responsibilities include leading M&A IAM architectures, consolidating disparate IdPs, and implementing

Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
• 10+ years in Information Security and Identity Management with leadership experience in enterprise IAM.

Responsibilities

• Architect M&A identity strategies and cross-domain authentication/federation.
• Lead cross-domain identity consolidation across multiple IdPs and directories.
• Define enterprise IAM architecture standards for SSO, IGA, and directory services.
• Architect hybrid and multi-cloud IAM bridges between on-prem AD/ADFS and cloud providers.

Skills

OAuth 2.0

OIDC

SAML 2.0

IGA

PAM

CIEM

NHIM

Leadership

Cross-Cloud

Education

Bachelor's degree in Computer Science or related field

Tools

Okta

Entra ID

Ping Identity

SailPoint

CyberArk

HashiCorp Vault

ADFS

Active Directory

Job description

Cardinal Health is seeking an experienced Identity and Access Management (IAM) Senior Engineer to lead the Workforce Identity team. You will architect, scale, and modernize systems securing 50,000+ global employees, contractors, and critical operations.

Drive identity strategy across a hyper-scale, hybrid multi-cloud environment and enable Zero Standing Privilege and JIT access patterns. Responsibilities include leading M&A IAM architectures, consolidating disparate IdPs, and implementing