> Markdown version of [/jobs/ext/4706808-azure-identity-access-management-engineer](https://www.wearedevelopers.com/jobs/ext/4706808-azure-identity-access-management-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Azure Identity & Access Management Engineer - **Company:** CVS Health - **Location:** Nashville, TN, United States - **Experience:** Experienced - **Salary:** $64,890 - $173,040 - **Contract:** Permanent contract - **Skills:** Active Directory, Application Programming Interfaces (APIs), Application Integration Architecture, User Authentication, Microsoft Azure, Microsoft Online Services, Software as a Service, Cloud Computing, Cloud Computing Security, Cloud Engineering, Cyber Security, Continuous Integration, Multi-Factor Authentication, Identity and Access Management, Python (Programming Language), OAuth, OpenID, Windows PowerShell, Role-Based Access Control, Openid Connect, Azure Active Directory, Runbook, Security Assertion Markup Language (SAML), Software Engineering, Systems Integration, Web Applications, Scripting, Enterprise Software Applications, Cyberark, Spring Cloud, Customer Identity Access Management, Information Technology, Deployment Automation, Hashicorp, Api Design, Terraform, Devsecops - **Published:** November 13, 2026 - **Apply:** https://dejobs.org/x/x/D34E622A7C784730BCD8755CC2A743CC/job/ ## About the Role * 3+ years of experience in Identity & Access Management, security engineering, cloud engineering, or a related discipline. * 3+ years of hands-on experience with Microsoft Entra ID and Azure identity services. * 3+ years of experience implementing CIAM or external/customer identity solutions. * 3+ years of experience implementing enterprise SSO, MFA, Conditional Access, RBAC, federation, and identity lifecycle management. * 3+ years with OAuth 2.0, OpenID Connect (OIDC), SAML, authentication, authorization, tokens, and federation. * 2+ years of experience integrating IAM capabilities with enterprise web applications, APIs, and cloud-native applications. * 2+ years of experience working with APIs, scripting, or automation technologies such as Microsoft Graph, PowerShell, Python, or Terraform., * Ability to work effectively with application developers, security engineers, cloud engineers, architects, and business stakeholders. * Deep experience with Microsoft Entra External ID / CIAM capabilities. * Experience implementing CIAM for high-volume customer-facing digital applications. * Experience with Microsoft Entra ID Governance, PIM, Conditional Access, workload identities, managed identities, and application registrations. * Experience integrating identity solutions into Azure-native applications and API architectures. * Infrastructure-as-Code experience with Terraform or similar tooling. * Experience with PAM platforms such as CyberArk, HashiCorp Vault, BeyondTrust, or Delinea. These technologies are also represented in your current IAM role requirements. * Experience working in healthcare or another highly regulated industry. * Familiarity with security and compliance requirements applicable to enterprise identity environments. * Relevant certifications such as Microsoft SC-300, AZ-500, CISSP, CISM, or equivalent cloud/security credentials. SC-300, AZ-500, CISSP, and CISM also appear among the preferred credentials in your existing IAM requisition., * Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related discipline, or equivalent relevant professional experience. ## Description The Identity and Access Management Engineer is responsible for contributing to the design, engineering, and supporting identity capabilities across workforce, privileged, cloud, and customer-facing environments. A primary focus of the role is helping establish and mature a new Customer Identity and Access Management (CIAM) capability, creating the identity architecture, engineering patterns, integrations, and operational foundations required to securely support customer-facing digital applications at scale. This engineer will work across Microsoft Azure and Microsoft Entra ID, applying identity engineering principles to both enterprise Workforce IAM and CIAM. The role spans authentication, authorization, federation, identity lifecycle management, privileged access, and application identity, with particular emphasis on integrating customer identity services with applications and APIs using OAuth 2.0 and OpenID Connect (OIDC). These capabilities must balance security and privacy requirements with availability, scalability, reliability, and customer experience. Role Responsibilities: Azure & Enterprise IAM * Design, implement, and support identity and access solutions using Microsoft Entra ID and Azure. * Engineer authentication, authorization, federation, SSO, MFA, Conditional Access, and role-based access control solutions. * Support hybrid identity integrations between Microsoft Entra ID, Active Directory, cloud platforms, SaaS applications, and enterprise applications. * Implement secure identity lifecycle processes supporting provisioning, access changes, and deprovisioning. * Design and support privileged access controls, including Privileged Identity Management (PIM) and least-privilege access models. * Implement service principal, workload identity, managed identity, and application identity controls within Azure environments. * Support identity governance activities including access reviews, entitlement management, role governance, and remediation of excessive access. Customer Identity & Access Management (CIAM) * Design, implement, and support CIAM solutions for customer-facing web, mobile, and digital applications. * Implement secure customer registration, sign-in, authentication, account recovery, and identity lifecycle patterns. * Integrate customer identity services with applications and APIs using standards including OAuth 2.0 and OpenID Connect (OIDC). * Partner with application engineering teams to integrate authentication and authorization into application architectures. * Support federation and external identity integrations across customer and partner ecosystems. * Troubleshoot complex login, token, federation, authorization, and application integration issues. * Ensure CIAM implementations balance security, customer experience, availability, scalability, and privacy requirements. Cloud Identity & Security * Implement identity controls for Azure cloud resources following least privilege and zero-standing-privilege principles. * Design Azure RBAC models and access patterns for cloud infrastructure, applications, APIs, workloads, and administrative functions. * Review identity configurations to identify excessive permissions, unused access, privileged roles, and other identity-related risk. * Partner with Cloud Security and DevSecOps teams to embed identity controls into cloud engineering practices. * Support Infrastructure-as-Code and automated identity configuration using technologies such as Terraform, PowerShell, Microsoft Graph, APIs, and CI/CD pipelines. * Build monitoring and operational capabilities for cloud identity services and authentication failures. Engineering & Operations * Serve as a technical escalation point for complex identity and authentication issues. * Participate in incident response involving compromised identities, authentication failures, privileged access, or unauthorized access. * Develop reusable engineering patterns, technical standards, runbooks, and reference architectures. * Automate provisioning, access management, reporting, and identity governance processes where practical. * Support production availability and operational reliability of business-critical identity services. * Partner with Security, Infrastructure, Architecture, GRC, Application Development, and business teams to deliver secure identity solutions.