[Hiring] Workforce IAM Engineer @Cardinal Health

Role Description

We are seeking a highly skilled and experienced Identity and Access Management (IAM) Engineer to join our Workforce Identity team. In this pivotal role, you will be instrumental in designing, implementing, and managing IAM solutions that secure our global workforce and enterprise applications and facilitate the secure, efficient, and seamless integration of identity and access systems in context of our rapid growth through Mergers and Acquisitions. You will ensure robust access controls, streamline user experiences, and maintain operational continuity across our diverse IT landscape. By automating lifecycle events, integrating HR systems, and building intuitive self-service pathways, you will directly influence workforce productivity, security posture, and overall onboarding experience. The ideal candidate will have deep technical expertise in modern IAM principles, protocols and products along with strong management and communication skills.

Responsibilities

• M&A and SSO Integration:
  • Lead IAM technical workstreams for Mergers, Acquisitions, and Divestitures.
  • Consolidate disparate identity providers (IdPs) into a unified enterprise SSO platform.
  • Design and execute cross-domain authentication and federation strategies to migrate or merge user populations under tight timelines.
• Automation and Workflows:
  • Design, implement, and maintain scalable IAM solutions including Single Sign-On (SSO), Identity Lifecycle Management (LCM), Identity Governance and Administration (IGA), and Privileged Access Management (PAM).
  • Develop automated workflows and API-driven integrations to streamline user onboarding, transitions, and offboarding (LCM), reducing manual provisioning overhead.
  • Implement infrastructure-as-code (IaC) principles for configuration management of IAM platforms.
• Security Policy, Compliance and Support:
  • Design and enforce Enterprise SSO Security Policies, including Phishing resistant Multi-Factor Authentication (MFA), Least Privilege access models, conditional Access Policies, and Role-Based Access Control (RBAC) frameworks.
  • Conduct regular access reviews, support IT compliance audits, and ensure systems comply with regulatory requirements (e.g., GDPR, HIPAA, SOX) to provide auditable records of access activities.
  • Troubleshoot, identify, and resolve complex identity and access-related issues, providing Tier 3 engineering support to internal teams and end-users during and after integrations.
• Collaboration and Operational Excellence:
  • Manage and optimize hybrid environments consisting of Active Directory (AD) and Microsoft Entra ID.
  • Coordinate with cross-functional teams (Information Security, IT Operations, HR, and Application Development) to ensure seamless IAM alignment with business processes.
  • Develop, review, and maintain comprehensive technical documentation, including architecture diagrams, runbooks, and configurations.

Qualifications

• Education: Bachelor's degree in Computer Science, Information Technology, Information Security, or a related field, or equivalent practical experience.
• Experience: 5+ years of progressive experience as an IAM Engineer, designing and implementing enterprise scale solutions with significant experience in supporting M&A integration projects preferred.
• Core Technical Expertise:
  • Identity & Directory Services: Strong command of Active Directory (AD), Microsoft Entra ID, LDAP, and Group Policy management.
  • IAM & Federation Standards: Extensive knowledge of authentication and authorization standards (SAML, OAuth, OIDC, and SCIM).
  • IAM Platforms: Hands-on experience with enterprise IdPs and governance suites (e.g., Okta, Ping Identity, Microsoft Entra ID, CyberArk, SailPoint, or ForgeRock).
  • Scripting & Automation: Proficiency in scripting languages (PowerShell, Python, or Bash) for automation, API integrations, and lifecycle management.
  • Security Frameworks: Solid understanding of Zero Trust architecture, Least Privilege, RBAC, and modern DevOps practices/SDLC.
  • Emerging Tech: Familiarity with AI/ML concepts and their application to risk-based authentication, user behavior analytics, and modern IAM contexts.
• Professional Attributes:
  • Ownership Mindset: A self-starter who takes end-to-end ownership of projects, holding themselves accountable for the security and operational integrity of the IAM platform.
  • Analytical Problem Solving: Excellent troubleshooting abilities to resolve unique access integration challenges in a fast-paced environment.
  • Communication: Ability to articulate complex security concepts to both technical and non-technical stakeholders.

Requirements

• Applies comprehensive knowledge and a thorough understanding of concepts, principles, and technical capabilities to perform varied tasks and projects.
• May contribute to the development of policies and procedures.
• Works on complex projects of large scope.
• Develops technical solutions to a wide range of difficult problems.
• Solutions are innovative and consistent with organization objectives.
• Completes work; independently receives general guidance on new projects.
• Work reviewed for purpose of meeting objectives.
• May act as a mentor to less experienced colleagues.

Benefits

• Medical, dental and vision coverage
• Paid time off plan
• Health savings account (HSA)
• 401k savings plan
• Access to wages before pay day with myFlexPay
• Flexible spending accounts (FSAs)
• Short- and long-term disability coverage
• Work-Life resources
• Paid parental leave
• Healthy lifestyle programs