Senior IAM Engineer — SSO/MFA & Directory Specialist

CVS Health; Wisconsin; Hybrid; USD 107,000 - 284,000; Full time

Benefits offered by this job

Bonus program

Equity rewards

Job summary

CVS Health is seeking a Senior IAM Engineer to enhance enterprise IAM platforms, including Ping Identity and LDAP services. You will administer SSO, MFA, and related infrastructure in a 24x7 enterprise environment, ensuring security and reliability across corporate systems.

You will implement automation using PowerShell, Python, Shell, and APIs, collaborate with cross-functional teams, and support disaster recovery, platform upgrades, and performance tuning.

Qualifications

• 7+ years of experience in Identity and Access Management (IAM).
• 5+ years of experience with Ping Identity products, LDAP technologies, and authentication platforms.
• 3+ years of experience with Radiant Logic (VDS/ICS), Ping Directory, or other enterprise LDAP solutions.
• 3+ years of experience with both Linux and Windows platforms.
• 3+ years of experience with PowerShell, Python, Shell, or API-based automation.

Responsibilities

• Administer and support Ping Identity platforms including PingFederate, PingAccess, Ping Directory, PingOne MFA, Ping DaVinci, and Risk-Based Authentication.
• Configure, troubleshoot, and support SSO, MFA, Passwordless Authentication, and Passkey solutions.
• Troubleshoot authentication and authorization issues involving SAML, OAuth, OpenID Connect (OIDC), LDAP, and related technologies.
• Install, administer, and maintain LDAP directory services including RadiantOne FID/VDS, Ping Directory, ODSEE, and IBM Tivoli Directory Server.
• Participate in 24x7 on-call support rotation for IAM, SSO, MFA, and LDAP services.

Skills

IAM expertise

Ping Identity

LDAP technologies

Linux & Windows

Automation

On-call support

SSO/MFA

Education

Bachelor's degree

Tools

PingFederate

PingAccess

Ping Directory

RadiantOne FID/VDS

ODSEE

IBM Tivoli Directory Server

APIs

Job description

CVS Health is seeking a Senior IAM Engineer to enhance enterprise IAM platforms, including Ping Identity and LDAP services. You will administer SSO, MFA, and related infrastructure in a 24x7 enterprise environment, ensuring security and reliability across corporate systems.

You will implement automation using PowerShell, Python, Shell, and APIs, collaborate with cross-functional teams, and support disaster recovery, platform upgrades, and performance tuning.