Senior IAM Engineer: SSO, MFA & Ping Identity Expert

CVS Health; Indiana; Hybrid; USD 107,000 - 284,000; Full time

Job summary

CVS Health is seeking a Senior IAM Engineer to strengthen enterprise identity and access management across Ping Identity, LDAP, and related infrastructure. You will administer, troubleshoot, and automate SSO, MFA, and directory services in a 24x7 environment.

You will collaborate with infrastructure, security, and application teams, perform on-call rotations, and contribute to disaster recovery, platform upgrades, and vulnerability remediation while documenting runbooks and operational processes.

Qualifications

• 7+ years in Identity and Access Management (IAM).
• 5+ years with Ping Identity products, LDAP technologies, and authentication platforms.
• 3+ years with Radiant Logic (VDS/ICS), Ping Directory, or other enterprise LDAP solutions.
• 3+ years on Linux and Windows platforms.
• 3+ years of PowerShell, Python, Shell, or API-based automation.

Responsibilities

• Administer Ping Identity platforms (PingFederate, PingAccess, Ping Directory, Ping One MFA, Ping DaVinci).
• Configure SSO, MFA, Passwordless, and Passkeys.
• Troubleshoot SAML, OAuth, OIDC, LDAP issues.
• Manage LDAP directories: RadiantOne FID/VDS, Ping Directory, ODSEE, IBM Tivoli Directory Server.
• Support LDAP integrations and migrations.
• Participate in 24x7 IAM on-call rotations.
• Proactive monitoring, incident resolution, and root cause analysis.
• Disaster recovery exercises, upgrades, and patching.
• Collaborate with infra, security, and app teams.
• Use scripting/automation to streamline processes.
• Explore AI-enabled automation and self-service improvements.
• Maintain runbooks and knowledge articles.
• Stay current with IAM tech and expand across auth, directory, cloud, security.

Skills

IAM

Ping Identity

LDAP

Linux/Windows

Automation scripting

PowerShell

Python

Education

Bachelor's degree

Tools

RadiantOne FID/VDS

Ping Directory

ODSEE

IBM Tivoli Directory Server

Job description

CVS Health is seeking a Senior IAM Engineer to strengthen enterprise identity and access management across Ping Identity, LDAP, and related infrastructure. You will administer, troubleshoot, and automate SSO, MFA, and directory services in a 24x7 environment.

You will collaborate with infrastructure, security, and application teams, perform on-call rotations, and contribute to disaster recovery, platform upgrades, and vulnerability remediation while documenting runbooks and operational processes.