Senior IAM Architect – Workforce Identity & Hybrid Cloud

Cardinal Health; United States; On-site; USD 125,000 - 179,000; Full time

Job summary

Cardinal Health, Inc. seeks an experienced IAM Senior Engineer to architect, scale, and modernize Identity and Access Management across a hyper-scale, hybrid multi-cloud environment.

You will drive identity strategy, lead M&A integrations, and champion Zero Standing Privilege and Just-In-Time access controls. The role focuses on SSO, IGA, PAM, and secure privileged access, requiring collaboration with Information Security, IT Operations, HR, and application teams to deliver scalable, compliant

Qualifications

• 10+ years in Information Security and Identity Management.
• 5+ years operating as a Lead or Principal Enterprise IAM Architect within a Fortune 500 or hyper-scale enterprise preferred.
• Deep understanding of IAM concepts and governance across multi-cloud environments.

Responsibilities

• Define and implement enterprise IAM architecture standards (SSO, IGA, and directory services).
• Lead cross-domain migrations and consolidate identity providers (Okta, Entra ID, Ping) across diverse directories.
• Architect cross-cloud federation, B2B collaboration, and tenant boundary governance.
• Drive Mergers & Acquisitions identity workstreams and post-acquisition integration.
• Design and implement authentication solutions (RBAC/PBAC, SoD) compliant with SOX/HIPAA/GDPR.
• Collaborate with Security, IT Operations, HR, and Applications for seamless IAM integration.

Skills

OAuth 2.0

OIDC

SAML 2.0

SCIM 2.0

FIDO2/WebAuthn

Kerberos

Education

Bachelor's degree in Computer Science or related field

Tools

SailPoint IdentityIQ

CyberArk

HashiCorp Vault

Microsoft Entra ID

Okta

Job description

Cardinal Health, Inc. seeks an experienced IAM Senior Engineer to architect, scale, and modernize Identity and Access Management across a hyper-scale, hybrid multi-cloud environment.

You will drive identity strategy, lead M&A integrations, and champion Zero Standing Privilege and Just-In-Time access controls. The role focuses on SSO, IGA, PAM, and secure privileged access, requiring collaboration with Information Security, IT Operations, HR, and application teams to deliver scalable, compliant