Cybersecurity IAM Engineer

Description

The company is a Fortune 10 firm in healthcare, known for insights, products and services that make quality care more accessible and affordable.

The team works on identity and access management, and the role supports how the company grows and shapes its work for patients, communities and staff.

The Medical-Surgical unit (MMS), expected to become Wellverse in early 2027, is a subsidiary and publicly reported segment of the parent company. It distributes medical-surgical supplies, pharmaceuticals, diagnostic equipment and related services to alternate care settings such as physician offices, surgery centers, long-term care providers, laboratories, home health and hospice agencies, health systems, government facilities and online retailers.

The unit has about 8,000 employees, 15 distribution centers and about 900 delivery vehicles. It works with more than 2,200 manufacturers, serves over 200,000 customer accounts across the U.S., and offers more than 270,000 SKUs of branded and private-label products, from bandages to specialty pharmaceuticals and COVID-19 tests.

Responsibilities

• Build modern authentication and single sign-on (SSO) using identity platforms such as Okta and Microsoft Entra ID.
• Set up, tune and enforce Multi-Factor Authentication (MFA) and conditional access policies for internal and external applications.
• Work with application and platform teams to connect systems and federate identity across domains using SAML 2.0, OAuth 2.0, OpenID Connect (OIDC) and WS-Fed.
• Help engineer, scale and keep authentication infrastructure highly available, so the identity provider stays resilient on every platform.
• Run proofs of concept to test new identity and access management tools and recommend those that fit enterprise needs.
• Conduct technical reviews, quality checks and code reviews to keep IAM engineering practices and compliance standards consistent.
• Build and automate authentication workflows, joiner-mover-leaver lifecycle processes and self-service provisioning.
• Troubleshoot and triage complex production IAM incidents and access problems.
• Work with risk and compliance stakeholders on SOX, ITGC and regulatory requirements for identity lifecycle and access governance.
• Design and maintain governance for non-human identities, secrets management and API access controls across cloud and hybrid environments.
• Minimum requirement: a bachelor's degree in IT, computer science, cybersecurity, engineering or a related field, or an equivalent mix of education and experience.

Requirements

• 2, 5+ years of experience engineering enterprise IAM.
• Hands-on experience with Okta or similar identity platforms.
• Proficiency in SSO and federation protocols: SAML 2.0, OIDC, OAuth 2.0 and WS-Fed.
• Experience engineering, troubleshooting and scaling resilient IdP infrastructure.
• Proficiency in scripting and automation with PowerShell, Python and Terraform, plus Infrastructure as Code.
• Solid grounding in enterprise directory services such as Active Directory and Entra ID, and in cloud security.
• Familiarity with GCP and core cloud security principles: IAM, networking, logging and encryption.
• Basic scripting in Python, PowerShell or Bash for task automation and reporting.
• Working knowledge of Windows and Linux administration and troubleshooting.
• Familiarity with NIST, CIS and ISO 27001 security frameworks and compliance standards.
• Understanding of security policies, compliance and risk management.
• Proven ability to follow procedures, troubleshoot issues and record work in tickets and runbooks.
• Strong analytical skills for triaging complex identity issues.
• Strong communication skills, including escalating issues and working across teams.
• Effective interpersonal skills with both technical and business stakeholders.
• Strong organizational skills to manage and prioritize several tasks at once.
• Adaptable self-starter who values integrity and keeps learning.
• Willingness to take part in on-call or after-hours incident support.
• Bachelor's degree in computer science, information security or assurance, engineering or a related field. An advanced degree is preferred, or equivalent experience.
• Preferred certifications (optional): CISSP, CISM, Okta Certified Professional or Administrator, Microsoft Certified: Identity and Access Administrator Associate, or equivalent identity and security credentials.

Conditions

Base pay range: $98,900 - $164,900.

Pay is set by performance, experience and skills, equity, regular job market reviews and geographic market, and stays compliant with applicable regulations.

Other compensation, such as an annual bonus or long-term incentive opportunities, may be offered in addition to base pay.

The company is an Equal Opportunity Employer.

Applicants should only apply through the official career site, the company's site. The company never asks for money or card details, and recruiters do not contact candidates through chat rooms or personal email accounts. Recruiting messages may come from the virtual assistant Gia.

Benefits

• Access to the company's Total Rewards package.