Senior Engineer, Workforce IAM

Cardinal Health

Confirmed live today High trust
Remote

Quick summary

Work type
Remote
Location
Remote
Salary
$125,300–$178,900 / yr
Employment
Full-time
Posted
2 days ago
Freshness
Confirmed live today

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $186k
This role $152k
$114k $234k
below market most similar roles pay here above market

This role pays less than 72% of similar roles. Most pay $148,536–$222,500 — the blue band above. At the midpoint, this role pays about $152k versus about $186k for comparable roles.

Based on 240 similar postings.

Employer

About Cardinal Health

Cardinal Health is a global healthcare services and products company specializing in pharmaceutical distribution, medical products, and supply chain solutions for healthcare providers and pharmacies. Industry: Healthcare Distribution & Services

Cardinal Health currently has 67 open roles on FindRole.

Listed pay typically runs $96,300–$150,100 across 27 roles with salary data.

Most-posted roles

View all roles at Cardinal Health

At a glance

TL;DR · Senior Engineer, Workforce IAM

Role Posting Log in to save

JOB TITLE: Senior Engineer, Workforce IAM The Senior Engineer, Workforce IAM joins the Information Security and Risk team to architect, scale, and modernize identity systems for a global workforce. This role involves designing high-velocity identity blueprints for mergers and acquisitions, leading cross-domain identity consolidation, and managing multi-cloud IAM bridges. You will build automated workflows for user lifecycle events, implement Zero Standing Privilege and Just-In-Time access patterns, and integrate HRMS platforms to drive policy-driven access models. Key technologies include Okta, Entra ID, Ping, SailPoint, CyberArk, and HashiCorp Vault, alongside protocols like OAuth 2.0, OIDC, SAML 2.0, and FIDO2. You will solve complex problems regarding identity governance, non-human identity management, and regulatory compliance for HIPAA, SOX, and GDPR within a hybrid multi-cloud environment.

What does a Engineer earn in Remote?

Median $207635 from 32 postings across 18 companies.

See salary data

Skills

Okta Microsoft Entra ID SailPoint CyberArk HashiCorp Vault Active Directory AWS Azure GCP OAuth 2.0 OpenID Connect SAML 2.0 SCIM 2.0 FIDO2 Kerberos REST SOAP JDBC infrastructure-as-code IAM PAM IGA ZSP JIT CIEM

What you'll do

  • Architect and lead identity blueprints for rapid Mergers, Acquisitions, and Divestitures to consolidate disparate identity providers.
  • Design and govern secure identity bridges linking on-premises infrastructure with multi-cloud environments like AWS, GCP, and Azure.
  • Define and implement Zero Standing Privilege (ZSP) and Just-In-Time (JIT) access control patterns using PAM and CIEM tools.
  • Formulate enterprise IAM standards for SSO, Identity Governance and Administration (IGA), and directory services.
  • Integrate HRMS platforms with identity lifecycles to automate joiner, mover, and leaver workflows.
  • Develop automated provisioning patterns and infrastructure-as-code (IaC) principles to reduce manual overhead.
  • Architect specialized authentication solutions including biometric FIDO2 and RFID systems for manufacturing and distribution sites.
  • Ensure all IAM systems and processes comply with SOX, HIPAA, and GDPR regulatory requirements.

What we're looking for

  • Bachelor's degree in Computer Science, Information Technology, Information Security, or a related field, or equivalent practical experience.
  • 10+ years of experience in Information Security and Identity Management.
  • 5+ years of experience as a Lead or Principal Enterprise IAM Architect within a Fortune 500 or hyper-scale enterprise (preferred).
  • Deep theoretical and practical command of OAuth 2.0, OpenID Connect, SAML 2.0, SCIM 2.0, FIDO2/WebAuthn, and Kerberos.
  • Proven architectural authority across enterprise IdPs (Microsoft Entra ID, Okta), IGA platforms (SailPoint), and PAM solutions (CyberArk, HashiCorp Vault).
  • Demonstrated success leading identity discovery, tenant consolidation, and domain migration workstreams across complex corporate structures.
  • Comprehensive familiarity with SOX 404 ITGC controls, HIPAA Security Rule, and international data sovereignty frameworks.
  • Exceptional executive communication skills and the ability to translate cryptographic/identity concepts into clear business risk decisions.

Related searches

More Senior Engineer jobs Remote Senior Engineer jobs All jobs at Cardinal Health

More like this

Similar roles

Workforce IAM Engineer

Cardinal Health

Remote 1 day ago $96,300–$151,360
Identity and Access Management (IAM) Microsoft Entra ID Active Directory SSO SAML OAuth OIDC SCIM LDAP Python PowerShell Bash Okta Ping Identity CyberArk SailPoint ForgeRock infrastructure-as-code (IaC RBAC MFA Zero Trust API Integration GDPR HIPAA SOX
5+ yrs exp Remote
Save

Senior Principal Enterprise Identity & Access Management Architect

Cigna

Bloomfield, CT 22 days ago $174,800–$291,300
IAM IGA PAM CIAM Zero Trust CyberArk Okta Ping Identity SailPoint Microsoft Entra ID SAML OAuth 2.0 OpenID Connect SCIM LDAP Kerberos FIDO2 AWS Azure GCP PowerShell Python Infrastructure-as-Code API Security
10+ yrs exp Hybrid
Save

AVP IAM AI Architect Cyber Security

LPL Financial

Fort Mill, SC +4 26 days ago $122,673–$204,455
IAM OAuth 2.0 OIDC PingOne AIC Microsoft Entra ID JWT SAML HashiCorp Vault SailPoint CyberArk Auth0 Kong CI/CD IaC Zero Trust PAM Secrets Management API Gateway BFF MCP
6+ yrs exp Hybrid
Save

Senior IAM Engineer M&A

AbbVie

North Chicago, IL 57 days ago $96,500–$183,500
Identity & Access Management (IAM) Active Directory Entra Okta PingOne SAML OIDC OAuth 2.0 AWS Azure GCP M365 GSuite Slack Automation NIST 800 ISO 27001 Cloud Security Identity Federation
6+ yrs exp Hybrid
Save

Senior Engineer

Deutsche Bank

Cary, NC 69 days ago
Java Spring Boot Kafka Oracle PL/SQL SOAP JMS MQ Spring Security Docker Kubernetes Helm Jenkins GitHub Actions Maven Git Bitbucket SonarQube JUnit Mockito Splunk OAuth Tomcat Unix/Linux CI/CD
3+ yrs exp
Save