Senior IAM Engineer: SSO, MFA & Directory Expert

CVS Health; Maryland; Hybrid; USD 107,000 - 284,000; Full time

Benefits offered by this job

Comprehensive benefits package

Equity award program

Job summary

CVS Health is seeking a Senior IAM Engineer to support and enhance enterprise Identity and Access Management platforms, including Ping Identity, LDAP, and authentication solutions in a 24x7 environment. You will administer, troubleshoot, automate, and provide operational support for SSO, MFA, directory services, and related infrastructure, collaborating with security, network, and application teams.

The role requires 7+ years IAM, strong Ping Identity and LDAP experience, and scripting skills;

Qualifications

• 7+ years of experience in Identity and Access Management (IAM).
• 5+ years of experience with Ping Identity products, LDAP technologies, and authentication platforms.
• 3+ years of experience with Radiant Logic (VDS/ICS), Ping Directory, or other enterprise LDAP solutions.
• 3+ years of experience with both Linux and Windows platforms.
• 3+ years of experience with PowerShell, Python, Shell, or API-based automation.

Responsibilities

• Administer and support Ping Identity platforms including PingFederate, PingAccess, Ping Directory, PingOne MFA, Ping DaVinci, and Risk-Based Authentication.
• Configure, troubleshoot, and support SSO, MFA, Passwordless Authentication, and Passkeys.
• Troubleshoot authentication and authorization issues involving SAML, OAuth, OpenID Connect (OIDC), LDAP, and related tech.
• Install, administer, and maintain LDAP directory services (RadiantOne, Ping Directory, ODSEE, IBM Tivoli Directory Server).
• Support LDAP application integrations, migrations, and directory consolidation initiatives.
• Participate in 24x7 on-call rotation for IAM, SSO, MFA, and LDAP services.
• Perform monitoring, incident resolution, root cause analysis, and vulnerability remediation.
• Collaborate with infra, security, and app teams to troubleshoot load balancers, DNS, SSL/TLS, proxy, and connectivity issues.
• Utilize scripting and automation tools to streamline operations.
• Leverage AI-assisted automation to improve self-service and efficiency.
• Maintain technical docs and runbooks; continuously improve processes.

Education

Bachelor's degree

Tools

PingFederate

PingAccess

Ping Directory

PingOne MFA

RadiantOne FID/VDS

ODSEE

IBM Tivoli Directory Server

Linux

Windows

PowerShell

Python

Shell

APIs

SAML

OAuth 2.0

OIDC

Job description

CVS Health is seeking a Senior IAM Engineer to support and enhance enterprise Identity and Access Management platforms, including Ping Identity, LDAP, and authentication solutions in a 24x7 environment. You will administer, troubleshoot, automate, and provide operational support for SSO, MFA, directory services, and related infrastructure, collaborating with security, network, and application teams.

The role requires 7+ years IAM, strong Ping Identity and LDAP experience, and scripting skills;