Identity and Access Engineer

Cardinal Health

6d•Remote

About The Position

Headquartered in Dublin, Ohio, Cardinal Health, Inc. (NYSE: CAH) is a global, integrated healthcare services and products company connecting patients, providers, payers, pharmacists, and manufacturers for coordinated care and improved patient outcomes. Backed by nearly 100 years of experience and supported by more than 50,000 employees in nearly 60 countries, Cardinal Health ranks among the top 20 on the Fortune 500. We offer extensive opportunities to grow technical and leadership skills within a culture that values collaboration, continuous improvement, employee well‑being, and career development. Team members enjoy dedicated training programs, supportive mentorship, and a strong sense of community. We are currently seeking a SailPoint Identity Engineer to join our Identity & Access Management organization. This role may be performed remotely. Department Overview: IAM / IAG The Identity and Access Management (IAM) and Identity and Access Governance (IAG) organization at Cardinal Health provides enterprise governance across all IAM solutions, processes, and access controls. The team is responsible for: User access review operations Enterprise identity governance Access certification accuracy and completion IAM controls and compliance Collaboration with Security Architecture, Risk, Compliance, and other security teams Our tools and technologies include SailPoint IdentityIQ, CyberArk, and Okta.

Requirements

Proven hands-on experience with SailPoint IdentityIQ or similar identity governance technologies.
Expertise across IdentityIQ components such as installation, build and deployment, Lifecycle Manager, Identity Governance, application onboarding, custom development, debugging, troubleshooting, RBAC, and access/data modeling.
Foundational understanding of information security principles and IAM best practices.
Strong design and development skills with database technologies (e.g., SQL, relational schema design).
Ability to design with non-functional requirements in mind, including performance, scalability, and security.
Experience working within Agile (Scrum) methodologies.
Experience writing code for high‑scalability systems.

Nice To Haves

SaaS IGA migration experience a plus.
CIEM (Cloud Infrastructure Entitlement Management) integration experience a plus.

Responsibilities

IAM Integrations (Build) Partner with clients and external stakeholders to design and implement IAM‑aligned service solutions.
Define and document technical requirements for data elements to be included in IdentityIQ, Okta, and CyberArk to support access certification and access management objectives.
Design and implement an enterprise Role-Based Access Control (RBAC) framework.
Design, develop, and maintain AI‑driven capabilities within the Identity Governance and Administration (IGA) platform to enhance access reviews, entitlement analysis, role mining, anomaly detection, and risk‑based decisioning across SOX and non‑SOX systems.
Establish requirements for effective, efficient integrations with IAM services.
Identify, design, and implement process improvements aligned with IAM best practices.
Conduct comprehensive testing of implementation solutions to ensure accuracy, reliability, scalability, and compliance with established security controls
Access Certifications (Run) Design and deploy effective access certification campaigns that ensure accuracy, completeness, and alignment with security and regulatory requirements.
Administer IdentityIQ access certification processes, ensuring operational and audit compliance.
Recommend and implement certification process improvements.
Perform data analytics and generate reporting to support governance and compliance activities.
Collaborate with business and technical teams to enhance IAM processes across the identity lifecycle.
Manage ServiceNow incidents, service requests, assessments, and enhancement requests, ensuring adherence to SLAs.
Create and maintain IdentityIQ rules, certification definitions, and workflows to support attestation processes.