Senior IAM Engineer: SSO, MFA & LDAP Automation

CVS Health; Illinois; Hybrid; USD 107,000 - 284,000; Full time

Job summary

CVS Health, a leading health services company in the United States, seeks a Senior IAM Engineer to manage enterprise IAM platforms, including Ping Identity and LDAP, with responsibilities spanning administration, troubleshooting, automation, and 24x7 operational support of SSO, MFA, and directory services.

You will collaborate with security, network, and application teams, apply scripting in PowerShell and Python, and contribute to reliability improvements, upgrades, disaster recovery exercises,

Qualifications

• 7+ years of experience in Identity and Access Management (IAM).
• 5+ years of experience with Ping Identity products, LDAP technologies, and authentication platforms.
• 3+ years of experience with Radiant Logic (VDS/ICS), Ping Directory, or other enterprise LDAP solutions.
• 3+ years of experience with both Linux and Windows platforms.
• 3+ years of experience with PowerShell, Python, Shell, or API-based automation.

Responsibilities

• Administer Ping Identity platforms including PingFederate, PingAccess, Ping Directory, PingOne MFA, Ping DaVinci, and Risk-Based Authentication.
• Configure, troubleshoot, and support SSO, MFA, Passwordless Authentication, and Passkey solutions.
• Troubleshoot authentication and authorization issues involving SAML, OAuth, OpenID Connect, LDAP, and related technologies.
• Install, administer, and maintain LDAP directory services (RadiantOne FID/VDS, Ping Directory, ODSEE, IBM Tivoli Directory Server).
• Support LDAP application integrations, migrations, service account configuration, ACIs, and directory consolidation initiatives.

Skills

IAM

Ping Identity

LDAP

Linux

Windows

Automation

PowerShell

Python

Shell

APIs

Education

Bachelor's degree

Tools

Ping Federate

Ping Access

Ping Directory

PingOne MFA

RadiantOne FID/VDS

LDAP

Linux

Windows

PowerShell

Python

Shell

APIs

Job description

CVS Health, a leading health services company in the United States, seeks a Senior IAM Engineer to manage enterprise IAM platforms, including Ping Identity and LDAP, with responsibilities spanning administration, troubleshooting, automation, and 24x7 operational support of SSO, MFA, and directory services.

You will collaborate with security, network, and application teams, apply scripting in PowerShell and Python, and contribute to reliability improvements, upgrades, disaster recovery exercises,