Senior IAM Engineer: SSO/MFA & Automation Leader

CVS Health; Kentucky; Hybrid; USD 107,000 - 284,000; Full time

Benefits offered by this job

Comprehensive benefits package

Job summary

CVS Health in the United States is seeking a Senior IAM Engineer to support and enhance enterprise IAM platforms, including Ping Identity and LDAP, in a 24x7 environment. You will administer SSO, MFA, directory services, and automation, collaborating with infrastructure, security, and application teams to resolve issues and improve reliability.

The role emphasizes on-call rotations, proactive monitoring, and leveraging scripting and AI-assisted automation to streamline operations.

Qualifications

• 7+ years of IAM experience.
• 5+ years with Ping Identity products, LDAP technologies, and authentication platforms.
• 3+ years with Radiant Logic (VDS/ICS), Ping Directory, or other enterprise LDAP solutions.
• 3+ years with Linux and Windows platforms.
• 3+ years of automation with PowerShell, Python, Shell, or API-based tooling.

Responsibilities

• Administer Ping Identity platforms including PingFederate, PingAccess, Ping Directory, PingOne MFA, Ping DaVinci, and Risk-Based Authentication.
• Configure, troubleshoot, and support SSO, MFA, Passwordless, and Passkey solutions.
• Troubleshoot authentication and authorization issues involving SAML, OAuth, OpenID Connect, LDAP, and related technologies.
• Install, administer, and maintain LDAP directory services including RadiantOne FID/VDS, Ping Directory, ODSEE, and IBM Tivoli Directory Server.
• Support LDAP application integrations, migrations, service account configuration, ACIs, and directory consolidation initiatives.
• Participate in 24x7 on-call support rotation for IAM, SSO, MFA, and LDAP services.
• Perform proactive monitoring, log analysis, incident resolution, root cause analysis, vulnerability remediation, and platform performance tuning.
• Support disaster recovery exercises, platform upgrades, patching activities, and operational readiness testing.
• Collaborate with infrastructure, network, security, and application teams to troubleshoot load balancers, DNS, SSL/TLS, proxy, and connectivity issues.
• Utilize scripting and automation tools (PowerShell, Python, Shell, APIs) to streamline operational processes and reduce manual effort.
• Leverage AI and emerging technologies to improve automation, self-service capabilities, operational efficiency, and user experience.
• Maintain technical documentation, runbooks, and knowledge articles while continuously improving operational processes.
• Demonstrate a strong learning mindset, stay current with IAM technologies, and proactively expand expertise across authentication, directory, cloud, and security domains.

Skills

IAM expertise

On-call support

Troubleshooting

Education

Bachelor's degree

Tools

Ping Identity

Radiant Logic

LDAP

Linux/Windows

Scripting (PowerShell, Python, Shell)

Job description

CVS Health in the United States is seeking a Senior IAM Engineer to support and enhance enterprise IAM platforms, including Ping Identity and LDAP, in a 24x7 environment. You will administer SSO, MFA, directory services, and automation, collaborating with infrastructure, security, and application teams to resolve issues and improve reliability.

The role emphasizes on-call rotations, proactive monitoring, and leveraging scripting and AI-assisted automation to streamline operations.