Senior IAM Engineer: SSO, MFA & Ping Expert

CVS Health; New Hampshire; Hybrid; USD 107,000 - 284,000; Full time

Benefits offered by this job

Medical, Dental & Vision coverage

Retirement savings options

Paid time off

Job summary

CVS Health is seeking a Senior IAM Engineer to design, implement, and support enterprise identity and access management platforms. You will administer Ping Identity suites, LDAP directories, and authentication solutions in a 24x7 environment.

The role emphasizes automation with PowerShell, Python, Shell, and APIs, plus collaboration with infrastructure, security, and application teams to ensure secure and reliable access across systems.

Qualifications

• 7+ years of IAM experience.
• 5+ years with Ping Identity products, LDAP technologies, and authentication platforms.
• 3+ years with Radiant Logic (VDS/ICS), Ping Directory, or other enterprise LDAP solutions.
• 3+ years on Linux and Windows platforms.
• 3+ years of automation with PowerShell, Python, Shell, or APIs.

Responsibilities

• Administer Ping Identity platforms and related IAM components.
• Configure and support SSO, MFA, passwordless, and Passkeys solutions.
• Troubleshoot authentication/authorization across SAML, OAuth, OIDC, LDAP.
• Manage LDAP directories (RadiantOne, Ping Directory, ODSEE, IBM Tivoli).
• Support LDAP integrations, migrations, and service accounts.
• Participate in 24x7 on-call rotation for IAM services.
• Perform monitoring, incident resolution, root cause analysis, and vulnerability remediation.
• Support disaster recovery, upgrades, and patching.
• Collaborate with infra, security, and app teams on connectivity issues.
• Develop automation using scripting and APIs to improve ops.

Skills

IAM

Ping Identity

LDAP

Linux

Windows

PowerShell

Python

Shell

API-based automation

Education

Bachelor's degree

Tools

Splunk

Dynatrace

PowerShell

Job description

CVS Health is seeking a Senior IAM Engineer to design, implement, and support enterprise identity and access management platforms. You will administer Ping Identity suites, LDAP directories, and authentication solutions in a 24x7 environment.

The role emphasizes automation with PowerShell, Python, Shell, and APIs, plus collaboration with infrastructure, security, and application teams to ensure secure and reliable access across systems.