Senior IAM Engineer: SSO, MFA & Directory Automation

CVS Health; Nevada; Hybrid; USD 107,000 - 284,000; Full time

Benefits offered by this job

Bonus eligible

Equity award program

Job summary

CVS Health is seeking a Senior IAM Engineer to support and enhance enterprise IAM platforms, including Ping Identity, LDAP, and authentication solutions. You will handle SSO, MFA, directory services, and related infrastructure in a 24x7 environment.

The role emphasizes automation using PowerShell, Python, Shell, or APIs, plus on-going documentation and recovery testing. Strong practical experience across SAML, OAuth, and OIDC is expected.

Qualifications

• 7+ years of IAM experience.
• 5+ years with Ping Identity products and LDAP.
• 3+ years with Radiant Logic or enterprise LDAP solutions.
• 3+ years on Linux and Windows platforms.
• 3+ years of PowerShell, Python, Shell, or API automation.

Responsibilities

• Administer Ping Identity platforms and MFA/SSO configurations.
• Troubleshoot authentication/authorization issues (SAML, OAuth, OIDC).
• Maintain LDAP directory services and migrations.
• Participate in 24x7 IAM on-call support and incident response.
• Automate operational tasks with scripting and APIs.

Skills

IAM experience

Ping Identity

LDAP technologies

Linux/Windows

Automation scripting

SAML/OIDC/OAuth

Education

Bachelor's degree

Tools

RadiantOne FID/VDS

Ping Directory

Azure AD

Entra ID / Okta

Splunk / AppDynamics / Dynatrace

Job description

CVS Health is seeking a Senior IAM Engineer to support and enhance enterprise IAM platforms, including Ping Identity, LDAP, and authentication solutions. You will handle SSO, MFA, directory services, and related infrastructure in a 24x7 environment.

The role emphasizes automation using PowerShell, Python, Shell, or APIs, plus on-going documentation and recovery testing. Strong practical experience across SAML, OAuth, and OIDC is expected.