Senior Engineer, Workforce IAM
Cardinal Health, Inc.21 hours ago
Remote, United StatesSenior
Base Salary
$125k - $179k/yr
Responsibilities
- Architect repeatable IAM blueprints and lead identity discovery, migration, consolidation, and federation workstreams for mergers, acquisitions, and divestitures.
- Define enterprise architecture standards and reference patterns for SSO, IGA, directory services, PAM, ZSP, JIT access, and cloud entitlement management.
- Design and govern identity bridges between Active Directory, ADFS, multi-cloud environments, SaaS platforms, and enterprise identity providers.
- Design SailPoint integrations and connectors for Active Directory, JDBC, Web Services, REST, and SOAP.
- Automate joiner, mover, and leaver lifecycle events, birthright provisioning, request workflows, and API-driven IAM operations.
- Implement policy-driven RBAC/PBAC, automated SoD controls, CIEM capabilities, and auditable access processes supporting SOX, HIPAA, and GDPR compliance.
- Design specialized authentication and access solutions including RFID badge access, FIDO2 smart cards, biometric authentication, and shared kiosk sessions.
- Research and incorporate Non-Human Identity Management, Identity Security Posture Management, and agentic/AI security controls into IAM roadmaps.
- Coordinate with Information Security, IT Operations, HR, and Application Development teams and document architecture, configurations, and operational procedures.
- Mentor less experienced colleagues and lead complex projects with significant and long-term enterprise impact.
Requirements
- Bachelor’s degree in Computer Science, Information Technology, Information Security, or a related field, or equivalent practical experience.
- 10+ years of experience in Information Security and Identity Management.
- At least 5+ years operating as a Lead or Principal Enterprise IAM Architect within a Fortune 500 or hyperscale enterprise is preferred.
- Deep practical and theoretical knowledge of OAuth 2.0, OpenID Connect, SAML 2.0, SCIM 2.0, FIDO2/WebAuthn, and Kerberos.
- Experience with Microsoft Entra ID, Okta, SailPoint IdentityIQ or Identity Security Cloud, CyberArk, and HashiCorp Vault.
- Demonstrated success leading identity discovery, tenant consolidation, and domain migration across complex, multi-entity corporate environments.
- Familiarity with SOX 404 ITGC controls, the HIPAA Security Rule, and international data sovereignty frameworks.
- Strong executive communication, stakeholder diplomacy, and ability to explain cryptographic and identity concepts in business-risk terms.
- Ability to manage multiple priorities and deadlines in a fast-paced M&A environment and stay current with IAM technologies and security threats.
Benefits
- Medical, dental, and vision coverage.
- Paid time off, paid parental leave, short- and long-term disability coverage, and work-life resources.
- Health savings account, flexible spending accounts, and 401k savings plan.
- Access to wages before payday through myFlexPay and healthy lifestyle programs.
- Bonus eligible; application window anticipated to close November 23, 2026.
Tech Stack
Categories
About Cardinal Health, Inc.
Cardinal Health is a public healthcare services company that distributes pharmaceuticals and medical products to hospitals, pharmacies, and healthcare providers, and manufactures a range of medical and laboratory supplies. It also operates nuclear pharmacies and offers data and performance solutions for healthcare operations. Founded in 1971 and headquartered in Dublin, Ohio, Cardinal Health trades on the NYSE under the ticker CAH and serves customers globally across care settings.