Senior Engineer, Workforce IAM

Cardinal Health

. Architect repeatable identity blueprints for mergers, acquisitions, and divestitures .

Posted 10/26/2026full-timeRemote • United StatesSenior💰 $125,300 - $178,900 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Identity and Access Management (IAM) architecture, including the design and implementation of cross-cloud federation, identity migration, and compliance with security regulations such as GDPR and HIPAA. Proven ability to lead complex identity consolidation projects and mentor teams in a fast-paced M&A environment.

Highest-signal resume keywords

Enterprise IAM ArchitectureIdentity MigrationOAuth 2.0, OpenID Connect, SAML 2.0Microsoft Entra ID, Okta, SailPointIAM Compliance with GDPR, HIPAA

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Identity ManagementCross-Cloud FederationIdentity Lifecycle ManagementAPI-Driven AutomationsRBAC/PBAC Access ModelsZero Standing Privilege PatternsJust-In-Time Access PatternsNon-Human Identity ManagementIdentity Security Posture ManagementInfrastructure-as-Code

Soft Skills

Executive CommunicationStakeholder DiplomacyAdaptabilityTime ManagementMentoring

Tools & Technologies

OktaMicrosoft Entra IDSailPoint IdentityIQCyberArkHashiCorp VaultWorkdaySuccessFactorsPeopleSoftActive DirectoryGCP

Industry Keywords

Information SecurityIdentity ManagementMergers and AcquisitionsSOX 404 ITGC ControlsHIPAA Security RuleData Sovereignty

Tech Stack

Tools & technologies

AWSAzureCloudGoogle Cloud PlatformVault

About the role

Key responsibilities & impact

Architect repeatable identity blueprints for mergers, acquisitions, and divestitures
Lead cross-domain identity consolidation across Okta, Entra ID, Ping, and divergent enterprise directories
Design cross-cloud federation, B2B collaboration frameworks, and tenant boundary governance
Lead IAM discovery, identity migration, and system consolidation for newly acquired entities
Define enterprise IAM architecture standards, patterns, and reference blueprints
Evaluate third-party integration patterns and vendor Statements of Work
Architect hybrid and multi-cloud IAM bridges across Active Directory, ADFS, GCP, AWS, Azure/Entra ID, Okta, and SailPoint
Define Zero Standing Privilege and Just-In-Time access patterns using PAM and CIEM
Research and integrate Non-Human Identity Management, Identity Security Posture Management, and AI security controls
Design HRMS integrations with Workday, SuccessFactors, and PeopleSoft
Formulate RBAC/PBAC access models and automated Segregation of Duties frameworks
Architect specialized authentication solutions for nuclear pharmacies, manufacturing plants, and distribution centers
Design self-service access monitoring capabilities for people leaders
Establish self-healing provisioning patterns and SailPoint connectors
Automate joiner, mover, leaver lifecycle events and request-based provisioning
Build API-driven automations and implement infrastructure-as-code for IAM configurations
Ensure IAM compliance with GDPR, HIPAA, SOX, and internal security policies
Design, implement, and maintain SSO, identity lifecycle management, IGA, and PAM solutions
Coordinate Information Security, IT Operations, HR, and Application Development teams
Develop technical documentation and maintain IAM best practices
Mentor less experienced colleagues

Requirements

What you’ll need

Bachelor's degree in Computer Science, Information Technology, Information Security, or a related field, or equivalent practical experience
10+ years in Information Security and Identity Management
At least 5+ years operating as a Lead or Principal Enterprise IAM Architect within a Fortune 500 or hyper-scale enterprise preferred
Deep theoretical and practical command of OAuth 2.0, OpenID Connect (OIDC), SAML 2.0, SCIM 2.0, FIDO2/WebAuthn, and Kerberos
Proven architectural authority across Microsoft Entra ID, Okta, SailPoint IdentityIQ / Identity Security Cloud, CyberArk, and HashiCorp Vault
Demonstrated success leading identity discovery, tenant consolidation, and domain migration workstreams across complex, multi-entity corporate structures
Familiarity with SOX 404 ITGC controls, HIPAA Security Rule, and international data sovereignty frameworks
Exceptional executive communication and stakeholder diplomacy
Ability to translate cryptographic/identity concepts into clear business risk decisions
Ability to manage multiple priorities and meet tight deadlines in a fast-paced M&A environment
Adaptability to evolving IAM technologies and security threats

Benefits

Comp & perks

Bonus eligible
Medical, dental and vision coverage
Paid time off plan
Health savings account (HSA)
401k savings plan
Access to wages before pay day with myFlexPay
Flexible spending accounts (FSAs)
Short- and long-term disability coverage
Work-Life resources
Paid parental leave
Healthy lifestyle programs