Senior IAM Engineer: SSO, MFA & Directory Expert

CVS Health; Colorado; Hybrid; USD 107,000 - 284,000; Full time

Job summary

CVS Health is seeking a Senior IAM Engineer to strengthen enterprise identity and access management. You will administer Ping Identity platforms, LDAP services, and authentication solutions in a 24x7 environment, driving automation and proactive monitoring.

You will collaborate with infrastructure, security, and application teams to implement SSO, MFA, and passwordless methods, troubleshoot complex auth issues, and maintain runbooks and documentation while staying current with IAM technologies.

Qualifications

• 7+ years of IAM experience.
• 5+ years with Ping Identity products and LDAP.
• 3+ years with Radiant Logic (VDS/ICS), Ping Directory, or other enterprise LDAP solutions.
• 3+ years with both Linux and Windows platforms.
• 3+ years of PowerShell, Python, Shell, or API-based automation.

Responsibilities

• Administer Ping Identity platforms (PingFederate, PingAccess, Ping Directory, MFA, and related tools).
• Configure SSO, MFA, Passwordless, and Passkeys solutions.
• Troubleshoot auth and authorization with SAML, OAuth, OIDC, LDAP.
• Manage LDAP directories (RadiantOne FID/VDS, Ping Directory, ODSEE, IBM Tivoli Directory Server).
• Support LDAP integrations, migrations, and service accounts.

Skills

IAM expertise

Ping Identity

LDAP tech

Automation scripting

SSO MFA

SAML/OIDC/OAuth

Linux & Windows

Education

Bachelor's degree

Tools

RadiantOne FID/VDS

Ping Directory

ODSEE

IBM Tivoli Directory Server

Radiant Logic

PowerShell

Python

Shell

APIs

Job description

CVS Health is seeking a Senior IAM Engineer to strengthen enterprise identity and access management. You will administer Ping Identity platforms, LDAP services, and authentication solutions in a 24x7 environment, driving automation and proactive monitoring.

You will collaborate with infrastructure, security, and application teams to implement SSO, MFA, and passwordless methods, troubleshoot complex auth issues, and maintain runbooks and documentation while staying current with IAM technologies.