Workforce IAM Engineer

Cardinal Health; Frankfort (KY); À distance; USD 96 000 - 151 000; Plein temps

Avantages offerts par ce poste

Medical, dental, vision

401k plan

Paid time off

HSA

Parental leave

Wellness programs

Résumé du poste

Cardinal Health, a global healthcare services and products company, is seeking an experienced IAM Engineer to design and implement enterprise IAM solutions with a focus on M&A integration. You will consolidate IdPs, implement SSO, and enforce security policies while collaborating with Information Security, IT Operations, HR, and Development teams.

The role emphasizes automation, IaC, and modern IAM practices, including RBAC and least privilege, with responsibilities spanning design,

Qualifications

• Bachelor’s degree or equivalent practical experience in Computer Science, Information Technology, Information Security, or related field.
• 5+ years of progressive IAM Engineer experience designing and implementing enterprise-scale solutions, with M&A integration experience preferred.
• Strong command of AD, Microsoft Entra ID, LDAP, and Group Policy management; extensive knowledge of SAML, OAuth, OIDC, and SCIM.

Responsabilités

• Lead IAM workstreams for Mergers, Acquisitions, and Divestitures (M&A).
• Consolidate disparate IdPs into a unified enterprise SSO platform.
• Design cross-domain authentication and federation strategies for user population migrations.
• Develop scalable IAM solutions including SSO, Identity Lifecycle Management, Identity Governance and Administration, and Privileged Access Management.
• Create automated workflows and API-driven integrations for onboarding, transitions, and offboarding.
• Apply IaC principles for IAM configuration management.
• Design and enforce Enterprise SSO security policies including MFA, Least Privilege, and RBAC.
• Perform access reviews, support audits, and ensure regulatory compliance (GDPR, HIPAA, SOX).
• Troubleshoot complex IAM issues and provide Tier 3 engineering support.
• Coordinate with cross-functional teams to align IAM with business processes.
• Document architecture, runbooks, and configurations.

Connaissances

Active Directory

Microsoft Entra ID

LDAP

Group Policy

SAML

OAuth

OIDC

SCIM

Okta

Ping Identity

CyberArk

SailPoint

ForgeRock

PowerShell

Python

Bash

Zero Trust

RBAC

DevOps

AI/ML IAM

M&A Integration

Formation

Bachelor’s degree in Computer Science/Information Technology or related

Outils

Okta

Ping Identity

Microsoft Entra ID

CyberArk

SailPoint

ForgeRock

Description du poste

Country-wide Remote

US-Nationwide-FIELD

Full time

20189863

Cardinal Health, Inc. (NYSE: CAH) is a global healthcare services and products company. We provide customized solutions for hospitals, healthcare systems, pharmacies, ambulatory surgery centers, clinical laboratories, physician offices and patients in the home. We are a distributor of pharmaceuticals and specialty products; a global manufacturer and distributor of medical and laboratory products; an operator of nuclear pharmacies and manufacturing facilities; and a provider of performance and data solutions. Working to be healthcare’s most trusted partner, our customer‑centric focus drives continuous improvement and leads to innovative solutions that improve the lives of people every day. With approximately 50,000 employees worldwide, Cardinal Health ranks among the top fifteen in the Fortune 500.

Department Overview:

Information Security and Risk develops, implements, and enforces security controls to protect the organization's technology assets from intentional or inadvertent modification, disclosure, or destruction. The function of this job family is to ensure secure, authorized, and compliant access to the organization's data, systems, and physical resources. It focuses on defining, creating, managing, and governing digital identities and their associated access privileges to protect the enterprise from security breaches, insider threats, and regulatory non‑compliance.

Responsibilities:

• M&A and SSO Integration
• Lead IAM technical workstreams for Mergers, Acquisitions, and Divestitures.
• Consolidate disparate identity providers (IdPs) into a unified enterprise SSO platform.
• Design and execute cross-domain authentication and federation strategies to migrate or merge user populations under tight timelines.
• Automation and Workflows
• Design, implement, and maintain scalable IAM solutions including Single Sign-On (SSO), Identity Lifecycle Management (LCM), Identity Governance and Administration (IGA), and Privileged Access Management (PAM).
• Develop automated workflows and API-driven integrations to streamline user onboarding, transitions, and offboarding (LCM), reducing manual provisioning overhead.
• Implement infrastructure-as-code (IaC) principles for configuration management of IAM platforms.
• Security Policy, Compliance and Support
• Design and enforce Enterprise SSO Security Policies, including Phishing resistant Multi-Factor Authentication (MFA), Least Privilege access models, conditional Access Policies, and Role-Based Access Control (RBAC) frameworks.
• Conduct regular access reviews, support IT compliance audits, and ensure systems comply with regulatory requirements (e.g., GDPR, HIPAA, SOX) to provide auditable records of access activities.
• Troubleshoot, identify, and resolve complex identity and access‑related issues, providing Tier 3 engineering support to internal teams and end‑users during and after integrations.
• Collaboration and Operational Excellence:
• Manage and optimize hybrid environments consisting of Active Directory (AD) and Microsoft Entra ID.
• Coordinate with cross‑functional teams (Information Security, IT Operations, HR, and Application Development) to ensure seamless IAM alignment with business processes.
• Develop, review, and maintain comprehensive technical documentation, including architecture diagrams, runbooks, and configurations.

Qualifications:

• Education: Bachelor's degree in Computer Science, Information Technology, Information Security, or a related field, or equivalent practical experience.
• Experience: 5+ years of progressive experience as an IAM Engineer, designing and implementing enterprise scale solutions with significant experience in supporting M&A integration projects preferred.
• Core Technical Expertise:
• Identity & Directory Services: Strong command of Active Directory (AD), Microsoft Entra ID, LDAP, and Group Policy management.
• IAM & Federation Standards: Extensive knowledge of authentication and authorization standards (SAML, OAuth, OIDC, and SCIM).
• IAM Platforms: Hands‑on experience with enterprise IdPs and governance suites such as Okta, Ping Identity, Microsoft Entra ID, CyberArk, SailPoint, or ForgeRock.
• Scripting & Automation: Proficiency in scripting languages (PowerShell, Python, or Bash) for automation, API integrations, and lifecycle management.
• Security Frameworks: Solid understanding of Zero Trust architecture, Least Privilege, RBAC, and modern DevOps practices/SDLC.
• Emerging Tech: Familiarity with AI/ML concepts and their application to risk‑based authentication, user behavior analytics, and modern IAM contexts.
• Professional Attributes:
• Ownership Mindset: A self‑starter who takes end‑to‑end ownership of projects, holding themselves accountable for the security and operational integrity of the IAM platform.
• Analytical Problem Solving: Excellent troubleshooting abilities to resolve unique access integration challenges in a fast‑paced environment.
• Communication: Ability to articulate complex security concepts to both technical and non‑technical stakeholders.

What is expected of you and others at this level

• Applies comprehensive knowledge and a thorough understanding of concepts, principles, and technical capabilities to perform varied tasks and projects
• May contribute to the development of policies and procedures
• Works on complex projects of large scope
• Develops technical solutions to a wide range of difficult problems
• Solutions are innovative and consistent with organization objectives
• Completes work; independently receives general guidance on new projects
• Work reviewed for purpose of meeting objectives
• May act as a mentor to less experienced colleagues

Anticipated salary range:

$96,300 - $151,360

Bonus eligible:

No

Benefits:

Cardinal Health offers a wide variety of benefits and programs to support health and well‑being.

• Medical, dental and vision coverage
• Paid time off plan
• Health savings account (HSA)
• 401k savings plan
• Access to wages before pay day with myFlexPay
• Flexible spending accounts (FSAs)
• Short- and long-term disability coverage
• Work‑Life resources
• Paid parental leave
• Healthy lifestyle programs

Application window anticipated to close:

11/23/2026

The salary range listed is an estimate. Pay at Cardinal Health is determined by multiple factors including, but not limited to, a candidate’s geographical location, relevant education, experience and skills and an evaluation of internal pay equity.

Cardinal Health supports an inclusive workplace that values diversity of thought, experience and background. We celebrate the power of our differences to create better solutions for our customers by ensuring employees can be their authentic selves each day. Cardinal Health is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state or local law.