Senior IAM Engineer, Ping Identity and Directory Services

CVS Health

Confirmed live yesterday High trust

Closes tomorrow Remote

Quick summary

Work type: Remote
Location: TX
Salary: $106,605–$284,280 / yr
Employment: Full-time
Posted: 6 days ago
Freshness: Confirmed live yesterday
Closes: Oct 12, 2026 (soon)
Nearby: 99+ roles within 25 mi

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $192k

This role $195k

$85k $306k

below market most similar roles pay here above market

This role pays more than 52% of similar roles. Most pay $156,950–$226,087 — the blue band above. At the midpoint, this role pays about $195k versus about $192k for comparable roles.

Based on 240 similar postings.

Employer

About CVS Health

CVS Health is a leading American healthcare company operating retail pharmacies, pharmacy benefit management services, and a health insurance segment through Aetna, one of the nation''s largest health insurers. Industry: Healthcare & Pharmacy

CVS Health currently has 109 open roles on FindRole.

Listed pay typically runs $106,605–$260,590 across 107 roles with salary data.

Most-posted roles

View all roles at CVS Health

At a glance

TL;DR · Senior IAM Engineer, Ping Identity and Directory Services

Role Posting Log in to save

Senior IAM Engineer - Ping Identity and Directory Services As a Senior IAM Engineer, you will join the team to support and enhance enterprise Identity and Access Management platforms. You will be responsible for the administration, troubleshooting, and automation of SSO, MFA, and directory services within a 24x7 enterprise environment. Your daily work involves configuring and maintaining Ping Identity products, including PingFederate, PingAccess, and PingOne MFA, alongside LDAP directory services like RadiantOne FID/VDS and IBM Tivoli Directory Server. You will resolve authentication issues involving SAML, OAuth, and OpenID Connect while performing proactive monitoring and vulnerability remediation. To streamline operations, you will utilize PowerShell, Python, Shell, and APIs for automation. This role solves critical security problems by managing complex authentication, federation, and directory consolidation initiatives across Linux and Windows platforms.

Skills

Ping Identity PingFederate PingAccess Ping Directory PingOne MFA Ping DaVinci LDAP SAML OAuth 2.0 OpenID Connect MFA SSO PowerShell Python Shell API Azure AD Microsoft Entra ID Okta Splunk AppDynamics Dynatrace FIDO2 WebAuthn DNS SSL/TLS

What you'll do

Administer and support Ping Identity platforms including PingFederate, PingAccess, and PingOne MFA.
Configure and troubleshoot Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Passwordless solutions.
Resolve authentication and authorization issues involving SAML, OAuth, OpenID Connect, and LDAP.
Install and maintain LDAP directory services including RadiantOne, Ping Directory, and IBM Tivoli.
Participate in a 24x7 on-call rotation for IAM, SSO, and LDAP services.
Perform proactive monitoring, log analysis, root cause analysis, and vulnerability remediation.
Use PowerShell, Python, and APIs to automate operational processes and reduce manual effort.
Maintain technical documentation, runbooks, and knowledge articles for IAM infrastructure.

What we're looking for

7+ years of experience in Identity and Access Management (IAM).
5+ years of experience with Ping Identity products, LDAP technologies, and authentication platforms.
3+ years of experience with Radiant Logic (VDS/ICS), Ping Directory, or other enterprise LDAP solutions.
3+ years of experience with both Linux and Windows platforms.
3+ years of experience with PowerShell, Python, Shell, or API-based automation.
Strong troubleshooting skills across authentication, federation, networking, and directory services.
Bachelor’s degree from an accredited college or university, or a High School Diploma/GED plus 4 years of related experience.
Strong knowledge of SAML, OAuth 2.0, OpenID Connect (OIDC), LDAP, MFA, Passkeys, and FIDO2/WebAuthn (preferred).

Similar roles

Senior Identity & Access Management (IAM) Engineer

Allstate

Remote (IL) 45 days ago $98,100–$167,850

Identity and Access Management (IAM) SAML OAuth OpenID Connect (OIDC) Python JavaScript Groovy YAML PowerShell IBM Verify Identity Access IBM Verify Access IBM Security Access Manager (ISAM) PingOne Advanced Identity Cloud (PAIC) Ping Access PingFederate PingAM Okta ForgeRock Active Directory LDAP SSO Agile Scrum MFA IGA PAM

5+ yrs exp Remote

Save

Senior IAM Automation Engineer

Apex

Austin, TX 179 days ago $108,800–$136,000

Python PowerShell Go Terraform Ansible Okta Entra ID Active Directory AWS IAM GCP Cloud Identity Tines Workday ServiceNow SAML OIDC SCIM CI/CD API SDK Adaxes Workato n8n

7+ yrs exp Hybrid

Save

Senior Cybersecurity Engineer IAM

Visa

Austin, TX 41 days ago $145,300–$232,700

IAM AWS Python Terraform IaC DevSecOps API zero‑trust Multicloud Automation Cloud Security

5+ yrs exp Hybrid

Save

Lead IAM Engineer

Braze

Chicago, IL +1 26 days ago $95,000–$150,000

Okta SAML OIDC OAuth 2.0 SCIM Terraform Python PowerShell CI/CD Infrastructure as Code API MFA Identity Governance Workday Google Workspace Slack GitHub Atlassian Zscaler 1Password SOX Controls

Hybrid

Save

Lead IAM Engineer

Braze

New York City, NY 31 days ago $101,000–$158,000

Okta SAML OIDC OAuth 2.0 SCIM Terraform Python PowerShell CI/CD Identity Governance SSO MFA API Workday Google Workspace Slack GitHub Atlassian zero-trust SOX Infrastructure as Code

Hybrid

Save

Lead IAM Engineer

Braze

Austin, TX +1 26 days ago $91,000–$142,000

Okta SAML OIDC OAuth 2.0 SCIM Terraform Python PowerShell CI/CD API Identity Governance SSO MFA Workday Google Workspace Slack GitHub Atlassian zero-trust SOX Controls

Hybrid

Save