Senior Engineer, Workforce IAM

Cardinal Health, Inc. (NYSE: CAH) is a global healthcare services and products company. We provide customized solutions for hospitals, healthcare systems, pharmacies, ambulatory surgery centers, clinical laboratories, physician offices and patients in the home. We are a distributor of pharmaceuticals and specialty products; a global manufacturer and distributor of medical and laboratory products; an operator of nuclear pharmacies and manufacturing facilities; and a provider of performance and data solutions. Working to be healthcare’s most trusted partner, our customer-centric focus drives continuous improvement and leads to innovative solutions that improve the lives of people every day. With approximately 50,000 employees worldwide, Cardinal Health ranks among the top fifteen in the Fortune 500.

Department Overview:

Information Security and Risk develops, implements, and enforces security controls to protect the organization's technology assets from intentional or inadvertent modification, disclosure, or destruction. The function of this job family is to ensure secure, authorized, and compliant access to the organization's data, systems, and physical resources. It focuses on defining, creating, managing, and governing digital identities and their associated access privileges to protect the enterprise from security breaches, insider threats, and regulatory non-compliance

We are seeking a highly skilled and experienced Identity and Access Management (IAM) Senior Engineer to join our Workforce Identity team. In this role, you will architect, scale, and modernize the systems that secure over 50,000 global employees, contractors, and critical distribution operations. You will drive identity strategy across a hyper-scale, hybrid multi-cloud environment, spearhead rapid M&A integrations, champion Zero Standing Privilege (ZSP), and architect next-generation non-human and frontline identity solutions.

Responsibilities:

M&A Architecture & Federation Strategy

• Architect repeatable, high-velocity identity blueprints for Mergers, Acquisitions, and Divestitures, reducing subsidiary integration timeframes from months to weeks.
• Lead cross-domain identity consolidation across disparate identity providers (Okta, Entra ID, Ping) and divergent enterprise directories.
• Design robust cross-cloud federation, B2B collaboration frameworks, and tenant boundary governance.
• Lead IAM technical workstreams for Mergers, Acquisitions, and Divestitures. Consolidate disparate identity providers (IdPs) into a unified enterprise SSO platform. Design and execute cross-domain authentication and federation strategies.
• Lead IAM discovery, identity migration, and system consolidation for newly acquired business entities.
• Direct experience migrating users, mapping attributes, and consolidating divergent directories.

Architecture influence and decision-making

• Define enterprise IAM architecture standards: Formulate technical standards, architectural patterns, and reference blueprints for enterprise SSO, Identity Governance and Administration (IGA), and directory services.
• Technical authority and vendor SoW evaluation: Act as a critical architectural authority to evaluate third-party integration patterns, challenge vendor Statements of Work (SoWs) for high-complexity migrations (e.g., ADFS to Okta) and establish technical decommissioning strategies for legacy identity platforms.

Hybrid and multi-cloud IAM

• Architect hybrid and multi-cloud IAM bridges: Design, govern, and scale secure identity bridges linking legacy on-premises infrastructure (Active Directory, ADFS) with hyper-scale multi-cloud environments (GCP, AWS, Azure/Entra ID) and SaaS ecosystems (Okta, SailPoint).
• Privileged Access and JIT governance: Define and architect robust Zero Standing Privilege (ZSP) and Just-In-Time (JIT) access control patterns using Privileged Access Management (PAM - CyberArk, HashiCorp Vault) and Cloud Infrastructure Entitlement Management (CIEM) to reduce the on-premises and cloud attack surface.

Emerging tech trends and business growth

• Modern Identity roadmaps (NHIM and ISPM): Research, evaluate, and integrate emerging industry trends—such as Non-Human Identity Management (NHIM), Identity Security Posture Management (ISPM), and agentic/AI security controls—into the long-term IAM roadmap.
• Agile Identity for business scale: Ensure identity systems are agile and scalable enough to support Cardinal Health's rapid business expansion, M&A pipeline, and digital healthcare operations without introducing friction

IGA Integrations

• Design repeatable, high-velocity identity blueprints for Mergers, Acquisitions, and Divestitures, reducing subsidiary integration timeframes from months to weeks.
• Lead cross-domain identity consolidation across disparate identity providers (Okta, Entra ID, Ping) and divergent enterprise directories.
• Design robust cross-cloud federation, B2B collaboration frameworks, and tenant boundary governance

…