Lead IAM Engineer

🔥 1 minute ago

🔔 Pennsylvania – Remote

🔔 Pennsylvania – Remote

💵 $107.5k - $153.5k / year

⏰ Full Time

🟠 Senior

👷🏻‍♀️ Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Covetrus

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

Founded 2018

🏥 Healthcare

📦 Logistics

💼 Consulting

💰 Seed Round on 2021-01

Healthcare • Logistics • Consulting

Covetrus is a global animal-health company dedicated to supporting veterinarians and their practices. The company offers a comprehensive portfolio of software, supplies, and services designed to connect care in and out of the clinic and focuses on improving the health and wellbeing of animals. With a strong emphasis on technology solutions, Covetrus provides practice management software, prescription management, and various client engagement tools to enhance operational efficiency and patient care. Their range of personalized pet healthcare solutions helps drive compliance, efficiency, and profitability for veterinary practices worldwide.

📋 Description

• Own the strategy, operations, and roadmap for enterprise IAM • Serve as the North American IAM Center of Excellence lead and partner with global COE counterparts • Lead IAM integration for mergers, acquisitions, and divestitures • Lead design, implementation, and operations of SSO, MFA, PAM, IGA, and directory services • Lead product evaluations, tool consolidations, and IAM initiatives supported by data-driven financial business cases • Enforce IAM policies and standards and create procedures aligned to NIST, CIS, ISO 27001, SOX, and other frameworks • Own joiner/mover/leaver execution, access provisioning, role engineering, and automated de-provisioning • Drive automation and self-service capabilities for access requests, approvals, provisioning, and entitlement reviews • Partner with End User Services and the Service Desk to automate ticket-based access requests • Mature PAM adoption, including vault adoption, session monitoring, and just-in-time access • Partner with Cyber and Network Operations on Zero Trust, SSO group management, identity-centric network access controls, and conditional access policies • Build and maintain integrations among IAM platforms, HR systems, ticketing systems, and downstream applications • Define KPIs and metrics for access hygiene, orphaned accounts, privilege sprawl, and SLA performance; report program health quarterly • Manage IAM vendor relationships, licensing, and contract renewals with Cyber and Procurement • Mentor IAM engineers and analysts • Support SOX, SOC 2, and ISO 27001 audits with evidence, control narratives, and remediation tracking • Drive IAM roadmap planning over a 12–18 month horizon

🎯 Requirements

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field; equivalent professional experience will be considered in lieu of a degree • 8+ years of progressive experience in information security or information technology, including 4+ years focused specifically on IAM • 3+ years serving as a senior or lead technical contributor on an IAM function or program within a mid-to-large enterprise environment (5,000+ employees) • Hands-on engineering experience designing, building, and operating enterprise IAM automation, including workflow engines, API/SCIM-based provisioning pipelines, and self-service access solutions • Experience integrating JML automation with an HRIS platform such as Workday or SAP SuccessFactors • Experience automating access certification/recertification campaigns at enterprise scale • Experience supporting SOX, SOC 2, ISO 27001, HIPAA, or equivalent audits • Experience managing PAM programs and vault platforms such as CyberArk, BeyondTrust, or Delinea in production • Demonstrated success building data-driven business cases for measurable cost savings and licensing efficiencies • Strong engineering mindset and ability to design, script, and deploy automated identity workflows using SCIM, LDAP, and REST/API connectors • Ability to build automated provisioning, de-provisioning, and entitlement review pipelines across SaaS, cloud, and on-premises systems • Scripting/automation experience with PowerShell, Python, or workflow orchestration platforms • Deep knowledge of SAML 2.0, OAuth 2.0, OIDC, Kerberos, and LDAP/LDAPS • Strong understanding of Zero Trust architecture, conditional access, and least-privilege enforcement • Ability to harden IAM/PAM environments against credential theft, privilege escalation, and lateral movement • Ability to define and track security KPIs • Ability to design scalable and resilient automated processes • Ability to build dashboards and metrics for program health and operational throughput • Ability to build and present financial business cases for tooling consolidation and license optimization • Strong vendor and contract management acumen • Relevant industry certifications preferred, including CISSP, CIAM, SC-300, or Okta Certified Professional • Travel as required to remote locations • On-call and on-demand extended work hours may include nights and weekends

🏖️ Benefits

• 401k savings & company match • Paid time off • Paid holidays • Maternity leave • Parental leave • Military leave • Other leaves of absence • Health, dental, and vision benefits • Health savings accounts • Flexible spending accounts • Life & disability benefits • Identity theft protection • Pet insurance • Certain positions may include eligibility for a short-term incentive plan