Senior Engineer, IAM Platform Engineering

Our team members are at the heart of everything we do. At Cencora, we are united in our responsibility to create healthier futures, and every person here is essential to us being able to deliver on that purpose. If you want to make a difference at the center of health, come join our innovative company and help us improve the lives of people and animals everywhere.

The CIAM Platform Engineer III is a senior-level engineer responsible for designing, implementing, and optimizing Customer Identity and Access Management (CIAM) solutions that deliver secure, scalable, and seamless digital experiences for customers, patients, partners, and other external users. This role serves as a technical lead for customer identity initiatives, driving platform engineering, authentication services, API integrations, automation, and security improvements across customer-facing applications.

The CIAM Platform Engineer III partners with software engineering, product, cybersecurity, architecture, and business teams to deliver modern identity capabilities including registration, authentication, authorization, consent management, customer profile management, Single Sign-On (SSO), Multi-Factor Authentication (MFA), social login, and identity federation. This role plays a key part in advancing customer identity strategy through automation, cloud-native architectures, and industry‑leading security practices.

• Designs, implements, and supports enterprise CIAM platforms that provide secure, scalable, and highly available customer authentication and authorization services.
• Engineers customer identity solutions supporting registration, profile management, account recovery, consent management, customer lifecycle management, and secure access to digital applications.
• Develops and maintains integrations between CIAM platforms and customer-facing applications using OAuth 2.0, OpenID Connect (OIDC), SAML, SCIM, REST APIs, and modern identity standards.
• Leads the implementation of authentication capabilities including Single Sign-On (SSO), Multi‑Factor Authentication (MFA), adaptive authentication, social identity providers, federation services, and passwordless authentication.
• Designs and maintains automation solutions that streamline customer onboarding, application onboarding, identity orchestration, access management, and operational support processes.
• Analyzes authentication telemetry, platform performance metrics, customer login trends, and security events to proactively identify and resolve service issues, fraud risks, and user experience challenges.
• Troubleshoots complex customer authentication, federation, authorization, and integration issues across cloud and hybrid environments.
• Creates and maintains architecture documentation, integration standards, technical specifications, operational procedures, and platform runbooks.
• Participates in platform upgrades, migrations, patching activities, and release validation efforts to ensure platform stability, resilience, and security.
• Collaborates with application development teams to integrate customer identity services into web, mobile, API, and SaaS applications.
• Partners with security and privacy teams to implement Zero Trust principles, customer identity protection controls, and compliance requirements.
• Provides technical guidance and mentorship to junior engineers while promoting CIAM engineering best practices and operational excellence.
• Evaluates emerging identity technologies, authentication methods, and customer security capabilities to drive continuous improvement across the CIAM platform.

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Software Engineering, or a related field, or equivalent experience.
• 5+ years of experience in Customer Identity and Access Management (CIAM), Identity and Access Management (IAM), software engineering, platform engineering, or related technical disciplines.
• Hands‑on experience implementing or supporting CIAM platforms such as Auth0, Okta Customer Identity, Forge Rock, Ping Identity, Microsoft Entra External , SAP Customer Data Cloud, or…