Senior IAM Architect: Workforce Identity & Hybrid Cloud

Cardinal Health; Nashville (TN); Remote; USD 125,000 - 179,000; Full time

Benefits offered by this job

Medical coverage

401k plan

Paid time off

HSA

Job summary

Cardinal Health is seeking an experienced IAM Architect to design and govern enterprise identity solutions across hybrid and multi-cloud environments. You will lead M&A identity integrations, standardize SSO/IGA patterns, and drive secure, compliant access across 50,000+ employees, contractors, and partners.

You will partner with Security, IT Operations, HR, and Applications to deliver scalable identity programs, implement modern identity trends, and ensure visibility and control across the

Qualifications

• Education: Bachelor's degree in Computer Science, Information Technology, Information Security, or related field.
• 10+ years in Information Security and Identity Management, with at least 5+ years as Lead/Principal Enterprise IAM Architect in a Fortune 500 or hyper-scale enterprise.
• Deep command of OAuth 2.0, OpenID Connect, SAML 2.0, SCIM 2.0, FIDO2/WebAuthn, and Kerberos.
• Proven architectural authority across IdPs (Microsoft Entra ID, Okta), IGA (SailPoint IdentityIQ/Identity Security Cloud), and PAM (CyberArk, HashiCorp Vault).
• Experience leading identity discovery, tenant consolidation, and domain migration across complex, multi-entity structures.
• Familiarity with SOX 404 ITGC controls, HIPAA, and data sovereignty frameworks.

Responsibilities

• Define enterprise IAM architecture standards and reference blueprints for SSO, IGA, and directory services.
• Evaluate third-party integration patterns and vendor SoWs for complex migrations (e.g., ADFS to Okta).
• Design hybrid and multi-cloud IAM bridges linking on-prem AD/ADFS with GCP/AWS/Azure and SaaS apps.
• Architect ZSP and JIT access using PAM and CIEM to reduce on-premises and cloud attack surface.
• Lead IAM discovery, migration, and consolidation for newly acquired entities.
• Develop self-service and automation patterns for provisioning and access governance.
• Collaborate with HRMS integrations (Workday, SuccessFactors, PeopleSoft) for lifecycle management.

Skills

OAuth 2.0

OIDC

SAML 2.0

SCIM 2.0

FIDO2/WebAuthn

Kerberos

Leadership

Architecture

Cross-functional collaboration

Education

Bachelor's degree in Computer Science / Information Security or related field

Tools

Microsoft Entra ID

Okta

SailPoint IdentityIQ

CyberArk

HashiCorp Vault

Job description

Cardinal Health is seeking an experienced IAM Architect to design and govern enterprise identity solutions across hybrid and multi-cloud environments. You will lead M&A identity integrations, standardize SSO/IGA patterns, and drive secure, compliant access across 50,000+ employees, contractors, and partners.

You will partner with Security, IT Operations, HR, and Applications to deliver scalable identity programs, implement modern identity trends, and ensure visibility and control across the