Workforce IAM Engineer

Country-wide Remote

US-Nationwide-FIELD

Full time

Cardinal Health, Inc. (NYSE: CAH) is a global healthcare services and products company. We provide customized solutions for hospitals, healthcare systems, pharmacies, ambulatory surgery centers, clinical laboratories, physician offices and patients in the home. We are a distributor of pharmaceuticals and specialty products; a global manufacturer and distributor of medical and laboratory products; an operator of nuclear pharmacies and manufacturing facilities;

and a provider of performance and data solutions. Working to be healthcare’s most trusted partner, our customer‑centric focus drives continuous improvement and leads to innovative solutions that improve the lives of people every day. With approximately 50,000 employees worldwide, Cardinal Health ranks among the top fifteen in the Fortune 500.

Information Security and Risk develops, implements, and enforces security controls to protect the organization's technology assets from intentional or inadvertent modification, disclosure, or destruction. The function of this job family is to ensure secure, authorized, and compliant access to the organization's data, systems, and physical resources. It focuses on defining, creating, managing, and governing digital identities and their associated access privileges to protect the enterprise from security breaches, insider threats, and regulatory non‑compliance.

• M&A and SSO Integration
• Lead IAM technical work streams for Mergers, Acquisitions, and Divestitures.
• Consolidate disparate identity providers (IdPs) into a unified enterprise SSO platform.
• Design and execute cross-domain authentication and federation strategies to migrate or merge user populations under tight timelines.
• Automation and Workflows
• Design, implement, and maintain scalable IAM solutions including Single Sign-On (SSO), Identity Lifecycle Management (LCM), Identity Governance and Administration (IGA), and Privileged Access Management (PAM).
• Develop automated workflows and API-driven integrations to streamline user onboarding, transitions, and offboarding (LCM), reducing manual provisioning overhead.
• Implement infrastructure-as-code (IaC) principles for configuration management of IAM platforms.
• Security Policy, Compliance and Support
• Design and enforce Enterprise SSO Security Policies, including Phishing resistant Multi-Factor Authentication (MFA), Least Privilege access models, conditional Access Policies, and Role-Based Access Control (RBAC) frameworks.
• Conduct regular access reviews, support IT compliance audits, and ensure systems comply with regulatory requirements (e.g., GDPR, HIPAA, SOX) to provide auditable records of access activities.
• Troubleshoot, identify, and resolve complex identity and access‑related issues, providing Tier 3 engineering support to internal teams and end‑users during and after integrations.
• Collaboration and Operational Excellence:
• Manage and optimize hybrid environments consisting of Active Directory (AD) and Microsoft Entra .
• Coordinate with cross‑functional teams (Information Security, IT Operations, HR, and Application Development) to ensure seamless IAM alignment with business processes.
• Develop, review, and maintain comprehensive technical documentation, including architecture diagrams, runbooks, and configurations.

• Education: Bachelor's degree in Computer Science, Information Technology, Information Security, or a related field, or equivalent practical experience.
• Experience: 5+ years of progressive experience as an IAM Engineer, designing and implementing enterprise scale solutions with significant experience in supporting M&A integration projects preferred.
• Core Technical Expertise:
• Identity & Directory…