Senior IAM Architect, Workforce Identity (Remote)

Cardinal Health; Trenton (NJ); Remote; USD 125,000 - 179,000; Full time

Benefits offered by this job

Medical, dental and vision coverage

401k savings plan

Paid time off

Job summary

Cardinal Health is seeking an experienced Identity and Access Management (IAM) Senior Engineer to join the Workforce Identity team. You will architect, scale, and modernize systems securing 50,000+ employees, contractors, and critical operations across hybrid multi-cloud environments.

You will drive identity strategy, champion Zero Standing Privilege (ZSP), and lead M&A integrations with cross-domain federation, enterprise SSO, and RBAC/PBAC governance.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Information Security, or related field.
• 5+ years operating in IAM architecture roles within large enterprises.
• Experience with multi-cloud IAM, SSO, IGA, PAM, and CIEM.

Responsibilities

• Architect repeatable, high-velocity identity blueprints for M&A and divestitures.
• Lead cross-domain identity consolidation across Okta, Entra ID, Ping, and directories.
• Design cross-cloud federation, B2B collaboration, and tenant boundary governance.
• Lead IAM workstreams for M&A; consolidate IdPs into a unified SSO platform.
• Drive identity migration and consolidation for newly acquired entities.
• Define enterprise IAM architecture standards for SSO, IGA, and directory services.

Skills

OAuth 2.0

OIDC

SAML 2.0

FIDO2/WebAuthn

Kerberos

Okta/Entra ID

SailPoint

CyberArk

HashiCorp Vault

Active Directory

Azure Entra ID

Education

Bachelor's degree in Computer Science or related field

Tools

SailPoint

CyberArk

HashiCorp Vault

Active Directory

Azure Entra ID

Okta

Job description

Cardinal Health is seeking an experienced Identity and Access Management (IAM) Senior Engineer to join the Workforce Identity team. You will architect, scale, and modernize systems securing 50,000+ employees, contractors, and critical operations across hybrid multi-cloud environments.

You will drive identity strategy, champion Zero Standing Privilege (ZSP), and lead M&A integrations with cross-domain federation, enterprise SSO, and RBAC/PBAC governance.