Senior IAM Engineer: SSO, MFA & Directory Specialist

CVS Health; Massachusetts; Hybrid; USD 107,000 - 284,000; Full time

Job summary

CVS Health is seeking a Senior IAM Engineer in Massachusetts to support enterprise IAM platforms, including Ping Identity, LDAP, and authentication solutions. The role focuses on administration, troubleshooting, automation, and 24x7 operational support of SSO, MFA, and directory services.

You will work with cross-functional teams to resolve authentication/authorization issues, perform platform tuning, and contribute to disaster recovery and upgrades.

Qualifications

• 7+ years of IAM experience
• 5+ years with Ping Identity products and LDAP
• 3+ years with Radiant Logic (VDS/ICS) or enterprise LDAP
• 3+ years with Linux and Windows
• 3+ years of automation (PowerShell, Python, Shell, APIs)

Responsibilities

• Administer Ping Identity platforms (PingFederate, PingAccess, Ping Directory, PingOne MFA)
• Configure and support SSO, MFA, Passwordless, Passkeys
• Troubleshoot SAML, OAuth, OIDC, LDAP issues
• Maintain LDAP directories (RadiantOne, Ping Directory, ODSEE, Tivoli)
• Support LDAP integrations, migrations, and service accounts
• Participate in 24x7 IAM on-call rotation
• Perform monitoring, incident resolution, root cause analysis
• Collaborate with infra, network, security teams
• Develop automation to streamline operations
• Maintain documentation and runbooks

Skills

IAM experience

Ping Identity products

LDAP technologies

Linux & Windows

Automation scripting

Education

Bachelor's degree

Tools

Ping Federate

PingAccess

Ping Directory

PingOne MFA

RadiantOne FID/VDS

ODSEE

Tivoli Directory Server

Job description

CVS Health is seeking a Senior IAM Engineer in Massachusetts to support enterprise IAM platforms, including Ping Identity, LDAP, and authentication solutions. The role focuses on administration, troubleshooting, automation, and 24x7 operational support of SSO, MFA, and directory services.

You will work with cross-functional teams to resolve authentication/authorization issues, perform platform tuning, and contribute to disaster recovery and upgrades.