Lead Engineer, IAM Platform Engineering

Job Description

The role involves leading the architecture, automation strategy, and modernization of enterprise Identity and Access Management (IAM) platforms to deliver secure, scalable, and highly automated identity services across the organization. The position also drives the adoption of AI-enabled capabilities, intelligent automation, and identity orchestration solutions that improve operational efficiency, strengthen security controls, and enhance user experiences.

Key Responsibilities

• Serves as a strategic advisor to technology and security leadership on identity innovation, automation opportunities, and emerging AI technologies that can transform identity governance, access management, privilege management, and threat detection.
• Leads the strategic design, implementation, and continuous evolution of enterprise IAM platforms supporting workforce, privileged, third-party, and customer identities.
• Architects and delivers automation solutions that streamline identity lifecycle management, access provisioning, deprovisioning, certification campaigns, privileged access controls, and compliance reporting.
• Designs and develops API-driven integrations, identity orchestration workflows, and Infrastructure-as-Code (IaC) capabilities to reduce manual effort and improve operational scalability.
• Evaluates and implements AI and machine learning capabilities within IAM processes to support intelligent access recommendations, anomaly detection, automated role mining, access analytics, and identity risk scoring.
• Promotes self-service identity solutions that improve user experience while maintaining strong governance and security controls.
• Develops automation frameworks leveraging scripting, workflow engines, low-code/no-code platforms, and AI-powered tools to accelerate onboarding, access requests, and operational support processes.
• Analyzes identity telemetry, authentication patterns, privileged access activity, and behavioral analytics to identify security risks and opportunities for automation.
• Mentors engineers and architects on automation best practices, AI adoption, secure development principles, and modern identity architecture patterns.
• Evaluates emerging IAM, automation, and AI technologies to influence strategic investments and long-term platform modernization initiatives.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Software Engineering, Data Science, or a related field, or equivalent experience.
• 6+ years of experience in IAM, platform engineering, cybersecurity engineering, software development, cloud engineering, or related disciplines.
• Demonstrated experience designing and deploying IAM automation solutions using APIs, scripting, workflow orchestration, or automation platforms.
• Hands-on experience with identity technologies such as SailPoint, Saviynt, Okta, Entra ID, Ping Identity, CyberArk, ForgeRock, BeyondTrust, or equivalent platforms.
• Experience developing automation using PowerShell, Python, JavaScript, Terraform, REST APIs, or similar technologies.
• Strong understanding of identity protocols including OAuth 2.0, OpenID Connect (OIDC), SAML, SCIM, LDAP, and JWT.
• Experience designing solutions that support Identity Governance, Access Management, Privileged Access Management, and Zero Trust initiatives.
• Knowledge of AI, machine learning, large language models (LLMs), intelligent automation, or analytics platforms as applied to identity and cybersecurity use cases.

What Cencora Offers

We provide a comprehensive suite of benefits that focus on the physical, emotional, financial, and social aspects of wellness, including support for working families, personal growth opportunities, and more. For details, visit here.