Azure Identity & Access Management Engineer

Job not on LinkedIn

🔥 10 minutes ago

🗽 New York – Remote

🗽 New York – Remote

💵 $64.9k - $173k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👷🏻‍♀️ Engineer

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.Why this score:

• Just posted.
• Jobs at this company usually fill in 21 days.

Apply Now

Find Similar Remote Jobs

CVS Health Careers

WebsiteLinkedInAll Job Openings

10,000+ employees

🏥 Healthcare

🛒 Retail

📦 Logistics

Healthcare • Retail • Logistics

CVS Health Careers is the recruitment and employer branding arm of CVS Health, showcasing job opportunities across the company's broad operations—pharmacy retail stores, pharmacy services, health care clinics, distribution warehouses, corporate functions and transportation. The careers site emphasizes purpose-driven work focused on improving access, affordability and quality of health care, and highlights a large workforce (300,000+ employees), inclusive culture, benefits, and hiring resources for applicants.

📋 Description

• Design, implement, and support identity and access solutions using Microsoft Entra ID and Azure • Engineer authentication, authorization, federation, SSO, MFA, Conditional Access, and role-based access control solutions • Support hybrid identity integrations across Microsoft Entra ID, Active Directory, cloud platforms, SaaS applications, and enterprise applications • Implement secure identity lifecycle processes for provisioning, access changes, and deprovisioning • Design and support privileged access controls, including Privileged Identity Management and least-privilege access models • Implement service principal, workload identity, managed identity, and application identity controls within Azure • Support identity governance activities including access reviews, entitlement management, role governance, and remediation of excessive access • Design, implement, and support CIAM solutions for customer-facing web, mobile, and digital applications • Implement customer registration, sign-in, authentication, account recovery, and identity lifecycle patterns • Integrate customer identity services with applications and APIs using OAuth 2.0 and OpenID Connect • Partner with application engineering teams to integrate authentication and authorization into application architectures • Troubleshoot login, token, federation, authorization, and application integration issues • Implement identity controls for Azure cloud resources following least privilege and zero-standing-privilege principles • Support Infrastructure-as-Code and automated identity configuration using Terraform, PowerShell, Microsoft Graph, APIs, and CI/CD pipelines • Build monitoring and operational capabilities for cloud identity services and authentication failures • Serve as a technical escalation point for complex identity and authentication issues • Participate in incident response involving compromised identities, authentication failures, privileged access, or unauthorized access • Develop reusable engineering patterns, technical standards, runbooks, and reference architectures • Automate provisioning, access management, reporting, and identity governance processes • Support production availability and operational reliability of business-critical identity services • Partner with Security, Infrastructure, Architecture, GRC, Application Development, and business teams to deliver secure identity solutions

🎯 Requirements

• 3+ years of experience in Identity & Access Management, security engineering, cloud engineering, or a related discipline • 3+ years of hands-on experience with Microsoft Entra ID and Azure identity services • 3+ years of experience implementing CIAM or external/customer identity solutions • 3+ years of experience implementing enterprise SSO, MFA, Conditional Access, RBAC, federation, and identity lifecycle management • 3+ years with OAuth 2.0, OpenID Connect (OIDC), SAML, authentication, authorization, tokens, and federation • 2+ years of experience integrating IAM capabilities with enterprise web applications, APIs, and cloud-native applications • 2+ years of experience working with APIs, scripting, or automation technologies such as Microsoft Graph, PowerShell, Python, or Terraform • Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related discipline, or equivalent relevant professional experience • Ability to work effectively with application developers, security engineers, cloud engineers, architects, and business stakeholders • Deep experience with Microsoft Entra External ID / CIAM capabilities • Experience implementing CIAM for high-volume customer-facing digital applications • Experience with Microsoft Entra ID Governance, PIM, Conditional Access, workload identities, managed identities, and application registrations • Experience integrating identity solutions into Azure-native applications and API architectures • Infrastructure-as-Code experience with Terraform or similar tooling • Experience with PAM platforms such as CyberArk, HashiCorp Vault, BeyondTrust, or Delinea • Experience working in healthcare or another highly regulated industry • Familiarity with security and compliance requirements applicable to enterprise identity environments • Relevant certifications such as Microsoft SC-300, AZ-500, CISSP, CISM, or equivalent cloud/security credentials

🏖️ Benefits

• CVS Health bonus, commission or short-term incentive program in addition to base pay • Medical coverage • Dental coverage • Vision coverage • Paid time off • Retirement savings options • Wellness programs • Other resources supporting physical, emotional, and financial well-being

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume