Senior IAM Architect – Workforce Identity & M&A (Remote)

Cardinal Health; Cheyenne (WY); Remote; USD 125,000 - 179,000; Full time

Benefits offered by this job

Medical, dental and vision

Paid time off

401k savings plan

HSA

Job summary

Cardinal Health seeks a senior IAM Architect to lead enterprise identity programs, including multi-cloud SSO, IGA, and PAM integration. You will drive M&A identity strategies, design scalable blueprints, and ensure SOX/HIPAA compliance while working with cross-functional teams.

The role requires 10+ years in security/identity and strong executive communication, with emphasis on large-scale migrations and secure access governance across global operations.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Information Security, or related field, or equivalent practical experience.
• 10+ years in Information Security and Identity Management with 5+ years as Lead/Principal IAM Architect in a Fortune 500 or hyper-scale enterprise.
• Deep knowledge of OAuth 2.0, OpenID Connect (OIDC), SAML 2.0, SCIM 2.0, FIDO2/WebAuthn, and Kerberos.
• Proven architectural authority across IdPs (Microsoft Entra ID, Okta) and IGA/PAM platforms (SailPoint IdentityIQ, CyberArk, HashiCorp Vault).
• Experience leading identity discovery, tenant consolidation, and domain migration.
• Familiarity with SOX 404 ITGC, HIPAA, and international data sovereignty frameworks.
• Executive communication and ability to translate identity concepts into business risk decisions.

Responsibilities

• Lead identity discovery, tenant consolidation, and domain migration workstreams across complex structures.
• Define enterprise IAM architecture standards, reference blueprints, and governance models.
• Evaluate third-party integrations and vendor SoWs for high-complexity migrations (e.g., ADFS to Okta).
• Architect hybrid/multi-cloud IAM bridges linking on-premises AD/ADFS to cloud providers and SaaS.
• Define ZSP/JIT access patterns using PAM and CIEM to reduce attack surfaces.
• Design SailPoint connectors for AD/REST/Web Services and automate provisioning lifecycles.
• Ensure IAM governance, policy-based access, SoD alignment, and regulatory compliance.

Skills

OAuth 2.0

OIDC

SAML 2.0

SCIM 2.0

FIDO2/WebAuthn

Kerberos

Entra ID

Okta

SailPoint IQ

CyberArk PAM

HashiCorp Vault

HIPAA compliance

SOX ITGC

Executive communication

Education

Bachelor's degree in Computer Science / Information Technology / Information Security

Tools

SailPoint IdentityIQ

Microsoft Entra ID

Okta

CyberArk

HashiCorp Vault

Job description

Cardinal Health seeks a senior IAM Architect to lead enterprise identity programs, including multi-cloud SSO, IGA, and PAM integration. You will drive M&A identity strategies, design scalable blueprints, and ensure SOX/HIPAA compliance while working with cross-functional teams.

The role requires 10+ years in security/identity and strong executive communication, with emphasis on large-scale migrations and secure access governance across global operations.