Senior IAM Architect - Workforce Identity (Remote)

Cardinal Health; Richmond (VA); Remote; USD 125,000 - 179,000; Full time

Benefits offered by this job

Medical, dental and vision coverage

Paid time off plan

Health savings account (HSA)

401k savings plan

Access to wages before pay day with my

FSAs

Short- and long-term disability

Work-Life resources

Paid parental leave

Healthy lifestyle programs

Job summary

Cardinal Health is seeking an experienced Identity and Access Management (IAM) Senior Engineer to secure access for 50,000+ employees, contractors, and distribution operations across a hyper-scale, multi-cloud environment.

You will architect and implement SSO, IGA, and PAM solutions, lead M&A identity integrations, and enforce Zero Standing Privilege and JIT access across Okta, Entra ID, Ping, SailPoint, and related technologies.

Qualifications

• Bachelor's degree or equivalent practical experience in Computer Science/Information Security.
• 10+ years in Information Security and Identity Management.
• 5+ years as a Lead/Principal Enterprise IAM Architect in a Fortune 500 or hyper-scale enterprise.
• Deep knowledge of OAuth 2.0, OIDC, SAML 2.0, SCIM 2.0, FIDO2/WebAuthn, Kerberos.

Responsibilities

• Define enterprise IAM architecture standards for SSO, IGA, and directory services.
• Evaluate vendor SoWs and high-complexity migrations (e.g., ADFS to Okta).
• Design and operate cross-cloud IAM bridges (ADFS, GCP, AWS, Azure/Entra ID).
• Lead IAM workstreams for M&A, consolidating IdPs and directories.

Skills

OAuth 2.0

OIDC

SAML 2.0

SCIM 2.0

FIDO2/WebAuthn

Kerberos

Microsoft Entra ID

Okta

IGA/SailPoint

PAM/CyberArk

Education

Bachelor's degree in Computer Science, Information Security, or related field

Tools

Okta

Entra ID

PingFederate

SailPoint IdentityIQ

CyberArk

HashiCorp Vault

Job description

Cardinal Health is seeking an experienced Identity and Access Management (IAM) Senior Engineer to secure access for 50,000+ employees, contractors, and distribution operations across a hyper-scale, multi-cloud environment.

You will architect and implement SSO, IGA, and PAM solutions, lead M&A identity integrations, and enforce Zero Standing Privilege and JIT access across Okta, Entra ID, Ping, SailPoint, and related technologies.