Engineer, Information Security and Risk

Company Overview

Cardinal Health, Inc. (NYSE: CAH) is a global healthcare services and products company. We provide customized solutions for hospitals, healthcare systems, pharmacies, ambulatory surgery centers, clinical laboratories, physician offices and patients in the home. We are a distributor of pharmaceuticals and specialty products; a global manufacturer and distributor of medical and laboratory products; an operator of nuclear pharmacies and manufacturing facilities;

and a provider of performance and data solutions. Working to be healthcare’s most trusted partner, our customer‑centric focus drives continuous improvement and leads to innovative solutions that improve the lives of people every day. With approximately 50,000 employees worldwide, Cardinal Health ranks among the top fifteen in the Fortune 500.

Information Technology oversees the effective development, delivery, and operation of computing and information services. This function anticipates, plans, and delivers Information Technology solutions and strategies that enable operations and drive business value.

Information Security and Risk develops, implements, and enforces security controls to protect the organization's technology assets from intentional or inadvertent modification, disclosure, or destruction. This job family develops system back‑up and disaster recovery plans, conducts incident responses, threat management, vulnerability scanning, virus management and intrusion detection as well as completes risk assessments.

• Customer Onboarding IAM Efforts - Strategy & Execution : Lead the planning, design, and execution for Customer Onboarding via federated SSO, ensuring alignment with overall business and security objectives. This includes assessing multiple Cardinal Health e‑commerce applications, understanding login requirements for new/existing customers, designing, testing and implementing solutions etc to ensure top notch user login experience and enhancing Cardinal Health's security posture.
• Collaboration & Communication: Coordinate cross‑functional teams, including Customer Business and IT teams, Cardinal Health's Account Management/Sales and Application teams, Information Security and others to ensure effective IAM implementation and seamless integration with business processes. Communicate complex security concepts to technical and non‑technical internal and external stakeholders.
• Application Integration Leadership: Lead the integration of various enterprise applications (SaaS, on‑premise, custom‑built) with our core IAM infrastructure, ensuring secure authentication, authorization, and user provisioning/de‑provisioning.
• User Lifecycle Management: Streamline and automate user provisioning, de‑provisioning, and periodic access reviews for employees, contractors, and partners across all integrated systems, ensuring smooth onboarding and offboarding during M&A transitions.
• Solution Design & Implementation: Design, implement, and maintain IAM solutions including Single Sign‑On (SSO), Multi‑Factor Authentication (MFA), and Role‑Based Access Control (RBAC) frameworks.
• Technical Troubleshooting & Support: Troubleshoot, identify, and resolve technical identity and access management‑related issues, providing expert support to internal teams and end‑users during and after integration.
• Documentation & Best Practices: Develop, review, and maintain comprehensive technical documentation, including architecture diagrams, configuration guides, and operational procedures. Stay up-to-date with IAM best practices, regulatory requirements, and security trends.

• Education: Bachelor's degree in Computer Science, Information Technology, Information Security, or a related field, or equivalent practical experience.
• Experience: 5+ years of progressive experience as an IAM Engineer, designing and implementing enterprise scale solutions with significant experience in supporting M&A integration projects preferred.
• Technical Expertise:
  • Extensive knowledge and experience with authentication standards and technologies such as SSO (SAML, OAuth, OpenID…