Azure Identity & Access Management Engineer

CVS Health Careers

. Design, implement, and support identity and access solutions using Microsoft Entra ID and Azure .

Posted 11/12/2026full-timeRemote • New York • United StatesMid-LevelSenior💰 $64,890 - $173,040 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and implementing identity and access management solutions using Microsoft Entra ID and Azure, with a strong focus on CIAM, SSO, MFA, and identity lifecycle management. Proven ability to integrate identity solutions with enterprise applications and APIs while ensuring compliance and security.

Highest-signal resume keywords

Microsoft Entra IDIdentity & Access ManagementCIAM ImplementationOAuth 2.0Infrastructure-as-Code

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

AuthenticationAuthorizationFederationMFAConditional AccessRole-Based Access ControlIdentity Lifecycle ManagementPrivileged Identity ManagementIdentity GovernanceAPI Integration

Soft Skills

CollaborationProblem-SolvingTechnical Escalation

Tools & Technologies

TerraformPowerShellMicrosoft GraphAzureSAMLOpenID ConnectCyberArkHashiCorp VaultBeyondTrustDelinea

Certifications & Qualifications

Microsoft SC-300AZ-500CISSPCISM

Industry Keywords

HealthcareRegulated IndustrySecurity Compliance

Tech Stack

Tools & technologies

AzureCloudCyber SecurityPythonTerraformVault

About the role

Key responsibilities & impact

Design, implement, and support identity and access solutions using Microsoft Entra ID and Azure
Engineer authentication, authorization, federation, SSO, MFA, Conditional Access, and role-based access control solutions
Support hybrid identity integrations across Microsoft Entra ID, Active Directory, cloud platforms, SaaS applications, and enterprise applications
Implement secure identity lifecycle processes for provisioning, access changes, and deprovisioning
Design and support privileged access controls, including Privileged Identity Management and least-privilege access models
Implement service principal, workload identity, managed identity, and application identity controls within Azure
Support identity governance activities including access reviews, entitlement management, role governance, and remediation of excessive access
Design, implement, and support CIAM solutions for customer-facing web, mobile, and digital applications
Implement customer registration, sign-in, authentication, account recovery, and identity lifecycle patterns
Integrate customer identity services with applications and APIs using OAuth 2.0 and OpenID Connect
Partner with application engineering teams to integrate authentication and authorization into application architectures
Troubleshoot login, token, federation, authorization, and application integration issues
Implement identity controls for Azure cloud resources following least privilege and zero-standing-privilege principles
Support Infrastructure-as-Code and automated identity configuration using Terraform, PowerShell, Microsoft Graph, APIs, and CI/CD pipelines
Build monitoring and operational capabilities for cloud identity services and authentication failures
Serve as a technical escalation point for complex identity and authentication issues
Participate in incident response involving compromised identities, authentication failures, privileged access, or unauthorized access
Develop reusable engineering patterns, technical standards, runbooks, and reference architectures
Automate provisioning, access management, reporting, and identity governance processes
Support production availability and operational reliability of business-critical identity services
Partner with Security, Infrastructure, Architecture, GRC, Application Development, and business teams to deliver secure identity solutions

Requirements

What you’ll need

3+ years of experience in Identity & Access Management, security engineering, cloud engineering, or a related discipline
3+ years of hands-on experience with Microsoft Entra ID and Azure identity services
3+ years of experience implementing CIAM or external/customer identity solutions
3+ years of experience implementing enterprise SSO, MFA, Conditional Access, RBAC, federation, and identity lifecycle management
3+ years with OAuth 2.0, OpenID Connect (OIDC), SAML, authentication, authorization, tokens, and federation
2+ years of experience integrating IAM capabilities with enterprise web applications, APIs, and cloud-native applications
2+ years of experience working with APIs, scripting, or automation technologies such as Microsoft Graph, PowerShell, Python, or Terraform
Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related discipline, or equivalent relevant professional experience
Ability to work effectively with application developers, security engineers, cloud engineers, architects, and business stakeholders
Deep experience with Microsoft Entra External ID / CIAM capabilities
Experience implementing CIAM for high-volume customer-facing digital applications
Experience with Microsoft Entra ID Governance, PIM, Conditional Access, workload identities, managed identities, and application registrations
Experience integrating identity solutions into Azure-native applications and API architectures
Infrastructure-as-Code experience with Terraform or similar tooling
Experience with PAM platforms such as CyberArk, HashiCorp Vault, BeyondTrust, or Delinea
Experience working in healthcare or another highly regulated industry
Familiarity with security and compliance requirements applicable to enterprise identity environments
Relevant certifications such as Microsoft SC-300, AZ-500, CISSP, CISM, or equivalent cloud/security credentials

Benefits

Comp & perks

CVS Health bonus, commission or short-term incentive program in addition to base pay
Medical coverage
Dental coverage
Vision coverage
Paid time off
Retirement savings options
Wellness programs
Other resources supporting physical, emotional, and financial well-being