Staff IAM Engineer, Ping Identity and Directory Services

CVS Health

Confirmed live today High trust
Closes in 5 days Remote

Quick summary

Work type
Remote
Location
TX
Salary
$106,605–$284,280 / yr
Employment
Full-time
Posted
2 days ago
Freshness
Confirmed live today
Closes
Nov 9, 2026 (soon)
Nearby
99+ roles within 25 mi

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $206k
This role $195k
$85k $306k
below market most similar roles pay here above market

This role pays less than 57% of similar roles. Most pay $167,442–$243,600 — the blue band above. At the midpoint, this role pays about $195k versus about $206k for comparable roles.

Based on 240 similar postings.

Employer

About CVS Health

CVS Health is a leading American healthcare company operating retail pharmacies, pharmacy benefit management services, and a health insurance segment through Aetna, one of the nation''s largest health insurers. Industry: Healthcare & Pharmacy

CVS Health currently has 117 open roles on FindRole.

Listed pay typically runs $106,605–$260,590 across 114 roles with salary data.

Most-posted roles

View all roles at CVS Health

At a glance

TL;DR · Staff IAM Engineer, Ping Identity and Directory Services

Role Posting Log in to save

Staff IAM Engineer - Ping Identity and Directory Services As a Senior IAM Engineer, you will join the team to support and enhance enterprise Identity and Access Management platforms within a 24x7 environment. Your primary responsibilities include administering Ping Identity products like PingFederate, PingAccess, and PingOne MFA, while managing LDAP directory services such as RadiantOne FID/VDS and IBM Tivoli Directory Server. You will build and maintain SSO, MFA, and passwordless authentication solutions, troubleshooting complex issues involving SAML, OAuth, and OpenID Connect. Daily tasks involve proactive monitoring, log analysis, vulnerability remediation, and platform performance tuning. You will utilize PowerShell, Python, Shell, and APIs to automate operational processes. This role solves critical authentication and authorization problems, ensuring secure directory consolidation and seamless connectivity across infrastructure, network, and security domains.

Skills

Ping Identity PingFederate PingAccess Ping Directory PingOne MFA Ping DaVinci LDAP SAML OAuth OpenID Connect MFA SSO PowerShell Python Shell API Azure AD Microsoft Entra ID Okta Splunk AppDynamics Dynatrace FIDO2 WebAuthn DNS SSL/TLS

What you'll do

  • Administer and support Ping Identity platforms including PingFederate, PingAccess, and PingOne MFA.
  • Configure and troubleshoot Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Passwordless Authentication solutions.
  • Resolve authentication and authorization issues involving SAML, OAuth, OpenID Connect, and LDAP technologies.
  • Install and maintain LDAP directory services including RadiantOne, Ping Directory, and IBM Tivoli.
  • Participate in a 24x7 on-call rotation to provide operational support for IAM and SSO services.
  • Perform proactive monitoring, log analysis, root cause analysis, and vulnerability remediation for IAM platforms.
  • Use PowerShell, Python, and APIs to automate operational processes and improve self-service capabilities.
  • Maintain technical documentation, runbooks, and knowledge articles to improve operational readiness.

What we're looking for

  • 7+ years of experience in Identity and Access Management (IAM).
  • 5+ years of experience with Ping Identity products, LDAP technologies, and authentication platforms.
  • 3+ years of experience with Radiant Logic (VDS/ICS), Ping Directory, or other enterprise LDAP solutions.
  • 3+ years of experience with both Linux and Windows platforms.
  • 3+ years of experience with PowerShell, Python, Shell, or API-based automation.
  • Bachelor’s degree from an accredited college or university, or a High School Diploma/GED plus 4 years of related experience.
  • Strong troubleshooting skills across authentication, federation, networking, and directory services (preferred).
  • Strong knowledge of SAML, OAuth 2.0, OpenID Connect (OIDC), LDAP, MFA, Passkeys, and FIDO2/WebAuthn (preferred).

Related searches

More Staff IAM Engineer jobs Remote Staff IAM Engineer jobs All jobs at CVS Health

More like this

Similar roles

Principal Identity & Access Management (IAM) Engineer

Early Warning Services

Chicago, IL 23 days ago $184,000–$230,000
Identity and Access Management (IAM) Identity Governance Administration (IGA) Active Directory Entra Okta Saviynt SailPoint Infrastructure as Code Network Protocols Least Privileged Access Change Management Security Audits Vulnerability Management Microsoft Office PCI CIAM CompTIA Security+ CISSP CISM CISA
10+ yrs exp Hybrid
Save

Senior Staff Identity & Access Management Engineer

Early Warning Services

Scottsdale, AZ +1 2 days ago $160,000–$200,000
IAM SAML OAuth 2.0 OpenID Connect SCIM Active Directory Okta Microsoft Entra ID Saviynt SailPoint AWS Azure Python PowerShell SQL REST APIs JSON XML
10+ yrs exp Hybrid
Save

Cybersecurity IAM Engineer

McKesson Corporation

Richmond, VA 5 days ago $98,900–$164,900
Okta Microsoft Entra ID SAML 2.0 OAuth 2.0 OpenID Connect WS-Fed Python PowerShell Bash Terraform GCP Active Directory Infrastructure as Code MFA SSO Linux Windows Secrets Management NIST CIS ISO 27001
2+ yrs exp
Save

ICAM Identity Provider (IdP) Engineer, Enterprise Authentication Services

General Dynamics

Fort Meade, MD 48 days ago $140,250–$189,750
SAML OAuth 2.0 OpenID Connect (OIDC) WS-Federation Identity and Access Management (IAM) Single Sign-On (SSO) Multi-Factor Authentication (MFA) Active Directory LDAP PKI Certificate-based Authentication Microsoft Entra ID PingFederate PingAccess Okta Keycloak PowerShell Docker Kubernetes Zero Trust Architecture Agile
5+ yrs exp
Save

ICAM Identity Provider (IdP) Engineer, Enterprise Authentication Services

General Dynamics

Fort Meade, MD 80 days ago $140,250–$189,750
SAML OAuth 2.0 OpenID Connect (OIDC) WS-Federation Identity and Access Management (IAM) Single Sign-On (SSO) Multi-Factor Authentication (MFA) PKI LDAP Active Directory Microsoft Entra ID PingFederate PingAccess Okta Keycloak PowerShell Docker Kubernetes Zero Trust Architecture
3+ yrs exp
Save