Senior IAM Engineer: SSO/MFA, Ping Identity Expert

CVS Health; Pennsylvania; Hybrid; USD 107,000 - 284,000; Full time

Benefits offered by this job

Comprehensive benefits package

Performance bonus eligibility

Job summary

CVS Health is seeking a Senior IAM Engineer to support and enhance enterprise IAM platforms including Ping Identity, LDAP directories, and authentication solutions in a 24x7 environment.

You will administer Ping Identity products, configure SSO/MFA solutions, and troubleshoot issues across SAML, OAuth, and OIDC. Strong scripting and automation skills are essential for operational efficiency.

Qualifications

• 7+ years of experience in Identity and Access Management (IAM).
• 5+ years of experience with Ping Identity products, LDAP technologies, and authentication platforms.
• 3+ years of experience with Radiant Logic (VDS/ICS), Ping Directory, or other enterprise LDAP solutions.
• 3+ years of experience with both Linux and Windows platforms.
• 3+ years of experience with PowerShell, Python, Shell, or API-based automation.

Responsibilities

• Administer Ping Identity platforms including PingFederate, PingAccess, Ping Directory, PingOne MFA, Ping DaVinci, and Risk-Based Authentication.
• Configure, troubleshoot, and support SSO, MFA, Passwordless authentication, and Passkey solutions.
• Troubleshoot authentication/authorization issues involving SAML, OAuth, OpenID Connect (OIDC), LDAP, and related technologies.
• Install, administer, and maintain LDAP directory services (RadiantOne FID/VDS, Ping Directory, ODSEE, IBM Tivoli Directory Server).
• Support LDAP application integrations, migrations, service account configuration, ACIs, and directory consolidation initiatives.
• Participate in 24x7 on-call support rotation for IAM, SSO, MFA, and LDAP services.
• Perform proactive monitoring, log analysis, incident resolution, root cause analysis, vulnerability remediation, and platform performance tuning.
• Support disaster recovery exercises, platform upgrades, patching activities, and operational readiness testing.
• Collaborate with infrastructure, network, security, and application teams to troubleshoot load balancers, DNS, SSL/TLS, proxy, and connectivity issues.
• Utilize scripting and automation tools (PowerShell, Python, Shell, APIs) to streamline operational processes and reduce manual effort.
• Leverage AI and emerging technologies to improve automation, self-service capabilities, operational efficiency, and user experience.
• Maintain technical documentation, runbooks, and knowledge articles while continuously improving operational processes.

Skills

IAM experience

Ping Identity

LDAP

Linux

Windows

Scripting

Automation

Education

Bachelor's degree

Tools

Ping Directory

RadiantOne FID/VDS

ODSEE

IBM Tivoli Directory Server

Radiant Logic

Job description

CVS Health is seeking a Senior IAM Engineer to support and enhance enterprise IAM platforms including Ping Identity, LDAP directories, and authentication solutions in a 24x7 environment.

You will administer Ping Identity products, configure SSO/MFA solutions, and troubleshoot issues across SAML, OAuth, and OIDC. Strong scripting and automation skills are essential for operational efficiency.