Azure Identity & Access Management Engineer
CVS Health4 days ago
USA (city not specified)Mid Level
H1B sponsor
Base Salary
$65k - $173k/yr
Responsibilities
- Design, implement, and support identity and access solutions using Microsoft Entra ID and Azure.
- Build and mature CIAM capabilities for customer-facing web, mobile, and digital applications.
- Engineer authentication, authorization, federation, SSO, MFA, Conditional Access, RBAC, and identity lifecycle solutions.
- Integrate customer identity services with applications and APIs using OAuth 2.0 and OpenID Connect.
- Implement privileged access, workload identity, managed identity, application identity, and least-privilege controls.
- Support hybrid identity integrations across Active Directory, cloud platforms, SaaS applications, and enterprise applications.
- Implement Azure cloud identity controls, RBAC models, access reviews, entitlement management, and governance processes.
- Automate provisioning, access management, reporting, and identity configuration using scripting, APIs, Infrastructure-as-Code, and CI/CD pipelines.
- Troubleshoot complex authentication, token, federation, authorization, and application integration issues.
- Serve as a technical escalation point and participate in incident response involving identity compromise, authentication failures, privileged access, or unauthorized access.
- Develop reusable engineering patterns, technical standards, runbooks, and reference architectures.
- Support production availability and operational reliability of business-critical identity services.
Requirements
- At least 3 years of experience in IAM, security engineering, cloud engineering, or a related discipline.
- At least 3 years of hands-on experience with Microsoft Entra ID and Azure identity services.
- At least 3 years of experience implementing CIAM or external/customer identity solutions.
- At least 3 years of experience with enterprise SSO, MFA, Conditional Access, RBAC, federation, and identity lifecycle management.
- At least 3 years of experience with OAuth 2.0, OpenID Connect, SAML, authentication, authorization, tokens, and federation.
- At least 2 years of experience integrating IAM capabilities with enterprise web applications, APIs, and cloud-native applications.
- At least 2 years of experience with APIs, scripting, or automation technologies such as Microsoft Graph, PowerShell, Python, or Terraform.
- Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related discipline, or equivalent relevant professional experience.
- Preferred experience with Microsoft Entra External ID, CIAM for high-volume customer applications, Entra ID Governance, PIM, Conditional Access, workload identities, managed identities, and application registrations.
- Preferred experience with Terraform or similar Infrastructure-as-Code tooling and PAM platforms such as CyberArk, HashiCorp Vault, BeyondTrust, or Delinea.
- Preferred experience in healthcare or another highly regulated industry.
- Relevant preferred certifications include Microsoft SC-300, AZ-500, CISSP, CISM, or equivalent cloud/security credentials.
Benefits
- Full-time position with a 40-hour anticipated work week.
- Eligible for medical, dental, and vision coverage, paid time off, retirement savings options, wellness programs, and other benefits based on eligibility.
- Eligible for a CVS Health bonus, commission, or short-term incentive program in addition to base pay.
- Application window is anticipated to close on November 26, 2026.
About CVS Health
CVS Health is a U.S. health care company that operates thousands of retail pharmacies, runs the CVS Caremark pharmacy benefits manager, and owns the Aetna health insurance business. It sells prescriptions, retail health goods, and insurance plans, and provides primary and urgent care through MinuteClinic and other services for consumers, employers, and government programs. Founded in 1963 and headquartered in Woonsocket, Rhode Island, it is a public company traded on the NYSE.