Workforce IAM Engineer

Cardinal Health

Confirmed live today High trust
Remote

Quick summary

Work type
Remote
Location
Remote
Salary
$96,300–$151,360 / yr
Employment
Full-time
Posted
1 day ago
Freshness
Confirmed live today

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $196k
This role $124k
$79k $256k
below market most similar roles pay here above market

This role pays less than 91% of similar roles. Most pay $152,893–$238,475 — the blue band above. At the midpoint, this role pays about $124k versus about $196k for comparable roles.

Based on 240 similar postings.

Employer

About Cardinal Health

Cardinal Health is a global healthcare services and products company specializing in pharmaceutical distribution, medical products, and supply chain solutions for healthcare providers and pharmacies. Industry: Healthcare Distribution & Services

Cardinal Health currently has 67 open roles on FindRole.

Listed pay typically runs $96,300–$150,100 across 27 roles with salary data.

Most-posted roles

View all roles at Cardinal Health

At a glance

TL;DR · Workforce IAM Engineer

The Workforce IAM Engineer joins the Workforce Identity team to design, implement, and manage identity and access management solutions for a global workforce. This role focuses on securing enterprise applications and facilitating seamless identity integration during rapid growth through mergers and acquisitions. Key responsibilities include leading technical workstreams for M&A integrations, consolidating disparate identity providers into a unified SSO platform, and automating lifecycle events through API-driven integrations. The engineer will manage hybrid environments using Active Directory and Microsoft Entra ID while enforcing security policies like phishing-resistant MFA and RBAC. Required technical skills include proficiency in SAML, OAuth, OIDC, and SCIM protocols, along with experience in PowerShell, Python, or Bash. The role ensures compliance with GDPR, HIPAA, and SOX while maintaining operational continuity across diverse IT landscapes.

What you'll do

  • Lead IAM technical workstreams for mergers, acquisitions, and divestitures to consolidate disparate identity providers.
  • Design and implement scalable IAM solutions including SSO, Lifecycle Management, IGA, and PAM.
  • Develop automated workflows and API-driven integrations to streamline user onboarding, transitions, and offboarding.
  • Implement infrastructure-as-code principles for the configuration management of IAM platforms.
  • Enforce security policies including phishing-resistant MFA, Least Privilege models, and RBAC frameworks.
  • Conduct regular access reviews and support IT compliance audits for regulatory requirements like GDPR and HIPAA.
  • Provide Tier 3 engineering support to troubleshoot and resolve complex identity and access-related issues.
  • Manage and optimize hybrid environments consisting of Active Directory and Microsoft Entra ID.

What we're looking for

  • Bachelor's degree in Computer Science, Information Technology, Information Security, or a related field, or equivalent practical experience.
  • 5+ years of progressive experience as an IAM Engineer.
  • Significant experience in supporting M&A integration projects (preferred).
  • Strong command of Active Directory (AD), Microsoft Entra ID, LDAP, and Group Policy management.
  • Extensive knowledge of authentication and authorization standards including SAML, OAuth, OIDC, and SCIM.
  • Hands-on experience with enterprise IdPs and governance suites such as Okta, Ping Identity, Microsoft Entra ID, CyberArk, SailPoint, or ForgeRock.
  • Proficiency in scripting languages including PowerShell, Python, or Bash for automation and API integrations.
  • Solid understanding of Zero Trust architecture, Least Privilege, RBAC, and modern DevOps practices/SDLC.

More like this

Similar roles

ICAM Engineer

Booz Allen Hamilton

Scott AFB, IL +1 49 days ago
Ping Identity Entra ID Okta ADFS SAML 2.0 OAuth 2.0 OpenID Connect RBAC ABAC Active Directory LDAP Zero Trust AWS Azure Google Cloud Python PowerShell Bash MFA SSO

Senior Engineer, Workforce IAM

Cardinal Health

Remote 2 days ago $125,300–$178,900
Okta Microsoft Entra ID SailPoint CyberArk HashiCorp Vault Active Directory AWS Azure GCP OAuth 2.0 OpenID Connect SAML 2.0 SCIM 2.0 FIDO2 Kerberos REST SOAP JDBC infrastructure-as-code IAM PAM IGA ZSP JIT CIEM
10+ yrs exp Remote

Lead IAM Engineer

Braze

Austin, TX +1 43 days ago $91,000–$142,000
Okta SAML OIDC OAuth 2.0 SCIM Terraform Python PowerShell CI/CD API Identity Governance SSO MFA Workday Google Workspace Slack GitHub Atlassian zero-trust SOX Controls
Hybrid

Lead IAM Engineer

Braze

Chicago, IL +1 43 days ago $95,000–$150,000
Okta SAML OIDC OAuth 2.0 SCIM Terraform Python PowerShell CI/CD Infrastructure as Code API MFA Identity Governance Workday Google Workspace Slack GitHub Atlassian Zscaler 1Password SOX Controls
Hybrid

Lead IAM Engineer

Braze

New York City, NY 48 days ago $101,000–$158,000
Okta SAML OIDC OAuth 2.0 SCIM Terraform Python PowerShell CI/CD Identity Governance SSO MFA API Workday Google Workspace Slack GitHub Atlassian zero-trust SOX Infrastructure as Code
Hybrid

ICAM Engineer

Booz Allen Hamilton

Reston, VA +1 34 days ago $86,800–$198,000
OCI IAM SAML 2.0 OpenID Connect OAuth 2.0 SCIM LDAP Active Directory Zero Trust Terraform Ping Identity Microsoft Entra ID Okta ADFS RMF ICD 503 RBAC ABAC MFA SSO
8+ yrs exp