[Hiring] Senior Engineer, Workforce IAM @Cardinal Health

Role Description

We are seeking a highly skilled and experienced Identity and Access Management (IAM) Senior Engineer to join our Workforce Identity team. In this role, you will architect, scale, and modernize the systems that secure over 50,000 global employees, contractors, and critical distribution operations. You will drive identity strategy across a hyper-scale, hybrid multi-cloud environment, spearhead rapid M&A integrations, champion Zero Standing Privilege (ZSP), and architect next-generation non-human and frontline identity solutions.

Responsibilities

• M&A Architecture & Federation Strategy:
  • Architect repeatable, high-velocity identity blueprints for Mergers, Acquisitions, and Divestitures, reducing subsidiary integration timeframes from months to weeks.
  • Lead cross-domain identity consolidation across disparate identity providers (Okta, Entra ID, Ping) and divergent enterprise directories.
  • Design robust cross-cloud federation, B2B collaboration frameworks, and tenant boundary governance.
  • Lead IAM technical workstreams for Mergers, Acquisitions, and Divestitures.
  • Consolidate disparate identity providers (IdPs) into a unified enterprise SSO platform.
  • Design and execute cross-domain authentication and federation strategies.
  • Lead IAM discovery, identity migration, and system consolidation for newly acquired business entities.
  • Direct experience migrating users, mapping attributes, and consolidating divergent directories.
• Architecture influence and decision-making:
  • Define enterprise IAM architecture standards: Formulate technical standards, architectural patterns, and reference blueprints for enterprise SSO, Identity Governance and Administration (IGA), and directory services.
  • Act as a critical architectural authority to evaluate third-party integration patterns and challenge vendor Statements of Work (SoWs) for high-complexity migrations.
  • Establish technical decommissioning strategies for legacy identity platforms.
• Hybrid and multi-cloud IAM:
  • Architect hybrid and multi-cloud IAM bridges: Design, govern, and scale secure identity bridges linking legacy on-premises infrastructure with hyper-scale multi-cloud environments and SaaS ecosystems.
  • Define and architect robust Zero Standing Privilege (ZSP) and Just-In-Time (JIT) access control patterns.
• Emerging tech trends and business growth:
  • Research, evaluate, and integrate emerging industry trends into the long-term IAM roadmap.
  • Ensure identity systems are agile and scalable enough to support Cardinal Health's rapid business expansion.
• IGA Integrations:
  • Design repeatable, high-velocity identity blueprints for Mergers, Acquisitions, and Divestitures.
  • Lead cross-domain identity consolidation across disparate identity providers and divergent enterprise directories.
  • Design authoritative source integration with HRMS platforms to drive the identity lifecycle.
  • Formulate policy-driven access models and automated Segregation of Duties (SoD) frameworks.
  • Architect specialized authentication solutions supporting various operational environments.
  • Design self-service capabilities for people leaders to monitor and right-size direct report access.
  • Partner with IAM Engineering to establish self-healing provisioning patterns.
• Application Onboarding:
  • Design, develop, and configure SailPoint connectors for various systems.
  • Configure and maintain Birthright provisioning for immediate access for joiners.
  • Automate lifecycle events and request-based provisioning workflows.
  • Expand Cloud Infrastructure Entitlement Management (CIEM) to discover and eliminate over-privileged assignments.
• Automation and Workflows:
  • Develop automated workflows to streamline user onboarding, transitions, and offboarding.
  • Build API-driven automations to reduce manual provisioning overhead.
  • Implement infrastructure-as-code (IaC) principles for IAM configurations.
• Security Policy and Compliance:
  • Ensure IAM systems comply with regulatory requirements and internal security policies.
  • Protect against data breaches by ensuring only authorized personnel can access sensitive information.
• Solution Design & Implementation:
  • Design, implement, and maintain IAM solutions including SSO, Identity lifecycle management, IGA, and PAM.
• Collaboration & Communication:
  • Coordinate cross-functional teams to ensure effective IAM implementation.
  • Communicate complex security concepts to technical and non-technical stakeholders.
• Documentation & Best Practices:
  • Develop, review, and maintain comprehensive technical documentation.
  • Stay up-to-date with IAM best practices, regulatory requirements, and security trends.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Information Security, or a related field, or equivalent practical experience.
• 10+ years in Information Security and Identity Management, with at least 5+ years operating as a Lead or Principal Enterprise IAM Architect.
• Deep theoretical and practical command of OAuth 2.0, OpenID Connect (OIDC), SAML 2.0, SCIM 2.0, FIDO2/WebAuthn, and Kerberos.
• Proven architectural authority across enterprise IdPs, IGA platforms, and PAM solutions.
• Demonstrated success leading identity discovery, tenant consolidation, and domain migration workstreams.
• Comprehensive familiarity with SOX 404 ITGC controls, HIPAA Security Rule, and international data sovereignty frameworks.
• Exceptional executive communication and stakeholder diplomacy skills.
• Ability to manage multiple priorities and meet tight deadlines in a fast-paced M&A environment.
• Adaptability to stay ahead of evolving IAM technologies and security threats.

Benefits

• Medical, dental and vision coverage
• Paid time off plan
• Health savings account (HSA)
• 401k savings plan
• Access to wages before pay day with myFlexPay
• Flexible spending accounts (FSAs)
• Short- and long-term disability coverage
• Work-Life resources
• Paid parental leave
• Healthy lifestyle programs