- Full-time · Senior
- $65K–$173K per year
- 3+ years
The Identity and Access Management Engineer is responsible for contributing to the design, engineering, and supporting identity capabilities across workforce, privileged, cloud, and customer-facing environments. A primary focus of the role is helping establish and mature a new Customer Identity and Access Management (CIAM) capability, creating the identity architecture, engineering patterns, integrations, and operational foundations required to securely support customer-facing digital applications at scale.
Compensation
The typical pay range for this role is: $64,890.00 - $173,040.00. This pay range represents the base hourly rate or base annual full-time salary for all positions in the job grade within which this position falls. This position is eligible for a CVS Health bonus, commission or short-term incentive program in addition to the base pay range listed above.
Responsibilities
- Design, implement, and support identity and access solutions using Microsoft Entra ID and Azure.
- Engineer authentication, authorization, federation, SSO, MFA, Conditional Access, and role-based access control solutions.
- Support hybrid identity integrations between Microsoft Entra ID, Active Directory, cloud platforms, SaaS applications, and enterprise applications.
- Implement secure identity lifecycle processes supporting provisioning, access changes, and deprovisioning.
- Design and support privileged access controls, including Privileged Identity Management (PIM) and least-privilege access models.
Requirements
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related discipline, or equivalent relevant professional experience.
- Nice to have: Microsoft Entra External ID