Senior IAM Engineer: Ping Identity, SSO & MFA Expert

CVS Health; Nebraska; Hybrid; USD 107,000 - 284,000; Full time

Benefits offered by this job

Comprehensive benefits package

Paid time off

Retirement savings options

Job summary

CVS Health is seeking a Senior IAM Engineer to support enterprise IAM platforms, including Ping Identity and LDAP directory services, in a 24x7 environment. The role focuses on administering, troubleshooting, automation, and operational support of SSO/MFA, directory services, and related infrastructure.

The position requires strong scripting skills (PowerShell, Python, Shell, APIs) and collaboration with cross-functional teams to ensure security, availability, and performance.

Qualifications

• 7+ years IAM experience
• 5+ years Ping Identity products, LDAP technologies, and authentication platforms
• 3+ years Radiant Logic (VDS/ICS), Ping Directory, or other enterprise LDAP solutions
• 3+ years Linux and Windows platforms
• 3+ years PowerShell, Python, Shell, or API-based automation

Responsibilities

• Administer Ping Identity platforms including PingFederate, PingAccess, Ping Directory, PingOne MFA, Ping DaVinci, and Risk-Based Authentication
• Configure, troubleshoot, and support SSO, MFA, Passwordless Authentication, and Passkey solutions
• Troubleshoot authentication and authorization issues involving SAML, OAuth, OIDC, LDAP
• Install, administer, and maintain LDAP directory services (RadiantOne FID/VDS, Ping Directory, ODSEE, IBM Tivoli Directory Server)
• Participate in 24x7 on-call rotation for IAM, SSO, MFA, and LDAP
• Perform proactive monitoring, log analysis, incident resolution, root cause analysis, and vulnerability remediation

Skills

IAM experience

Ping Identity

LDAP technologies

Linux & Windows

Automation scripting

PowerShell

Python

Shell

Education

Bachelor's degree

Tools

RadiantOne FID/VDS

Ping Directory

ODSEE

IBM Tivoli Directory Server

Job description

CVS Health is seeking a Senior IAM Engineer to support enterprise IAM platforms, including Ping Identity and LDAP directory services, in a 24x7 environment. The role focuses on administering, troubleshooting, automation, and operational support of SSO/MFA, directory services, and related infrastructure.

The position requires strong scripting skills (PowerShell, Python, Shell, APIs) and collaboration with cross-functional teams to ensure security, availability, and performance.