Workforce IAM Engineer

Cardinal Health

1d•$96,300 - $1,515,360

About The Position

Cardinal Health is seeking an experienced Identity and Access Management (IAM) Engineer to join its Workforce Identity team. The role designs, implements, and manages IAM solutions that secure the global workforce and enterprise applications, including integration of identity and access systems during mergers, acquisitions, and divestitures. It supports strong access controls, seamless user experiences, and operational continuity across a diverse IT environment. The engineer will automate identity lifecycle events, integrate HR systems, and develop self-service pathways to improve workforce productivity, security, and onboarding. The position works across single sign-on, identity lifecycle management, identity governance and administration, privileged access management, directory services, and federation. It includes Tier 3 support, compliance and access reviews, technical documentation, and close coordination with Information Security, IT Operations, HR, and Application Development. The role is expected to apply broad technical knowledge to complex projects, develop solutions to difficult problems, and may mentor less experienced colleagues.

Requirements

Bachelor's degree in Computer Science, Information Technology, Information Security, or a related field, or equivalent practical experience.
At least 5 years of progressive IAM engineering experience designing and implementing enterprise-scale solutions.
Strong command of Active Directory, Microsoft Entra ID, LDAP, and Group Policy management.
Extensive knowledge of SAML, OAuth, OIDC, and SCIM authentication and authorization standards.
Proficiency with scripting languages such as PowerShell, Python, or Bash for automation, API integrations, and lifecycle management.
Solid understanding of Zero Trust architecture, least privilege, RBAC, and modern DevOps practices and SDLC.
Excellent troubleshooting and analytical problem-solving abilities.
Ability to communicate complex security concepts to technical and non-technical stakeholders.
Ability to take end-to-end ownership of projects and be accountable for IAM platform security and operational integrity.

Nice To Haves

Significant experience supporting M&A integration projects.
Hands-on experience with enterprise identity providers and governance suites such as Okta, Ping Identity, Microsoft Entra ID, CyberArk, SailPoint, or ForgeRock.
Familiarity with AI/ML concepts and their application to risk-based authentication, user behavior analytics, and IAM.

Responsibilities

Lead IAM technical workstreams for mergers, acquisitions, and divestitures.
Consolidate disparate identity providers into a unified enterprise single sign-on platform.
Design and execute cross-domain authentication and federation strategies to migrate or merge user populations.
Design, implement, and maintain scalable IAM solutions for SSO, identity lifecycle management, identity governance and administration, and privileged access management.
Develop automated workflows and API-driven integrations for user onboarding, transitions, and offboarding.
Apply infrastructure-as-code principles to IAM platform configuration management.
Design and enforce enterprise SSO security policies, including phishing-resistant MFA, least-privilege access, conditional access, and RBAC.
Conduct access reviews, support IT compliance audits, and help ensure regulatory compliance and auditable access records.
Troubleshoot and resolve complex identity and access issues, providing Tier 3 engineering support during and after integrations.
Manage and optimize hybrid environments comprising Active Directory and Microsoft Entra ID.
Coordinate with Information Security, IT Operations, HR, and Application Development to align IAM with business processes.
Develop, review, and maintain technical documentation, including architecture diagrams, runbooks, and configurations.