CVS Health
Staff Security Engineer -Sailpoint Identity Security Cloud
CVS Health, Hartford, Connecticut, us, 06112
Staff Security Engineer - Sailpoint Identity Security Cloud
At CVS Health, we’re building a world of health around every consumer and surrounding ourselves with dedicated colleagues who are passionate about transforming health care. As the nation’s leading health solutions company, we reach millions of Americans through our local presence, digital channels and more than 300,000 purpose‑driven colleagues – caring for people where, when and how they choose in a way that is uniquely more connected, more convenient and more compassionate.
Position Summary The Staff Security Engineer of IAM will be the architect and lead engineer for SailPoint ISC implementation at CVS Health. This role involves hands‑on engineering of IAM solutions, leading multiple projects, and providing technical direction for SailPoint ISC initiatives. You will shape the company’s identity and access management strategy, ensuring robust security and compliance across the enterprise, and collaborate with cross‑functional teams to deliver scalable, secure, and innovative IAM solutions that support business objectives and regulatory requirements.
Responsibilities
Lead team members through various SailPoint ISC implementation initiatives and features.
Provide technical leadership on foundational IGA capabilities, including Application Onboarding, RBAC, Access Request Configuration, Access Reviews & Lifecycle Events.
Evaluate new product offerings and implement selected use cases, such as NERM, CIEM, Machine Identities, AI Access Review Recommendation, etc.
Ensure platform health and lead day‑to‑day maintenance and upkeep of the platform.
Provide technical leadership for migration efforts from legacy IAM platforms.
Build customizations and API integrations for the SailPoint ISC platform.
Manage implementations and releases via CI/CD strategies.
Required Qualifications
Over 7 years of progressive experience in Identity and Access Management (IAM), delivering secure and scalable solutions.
5+ years of hands‑on technical engineering expertise in IAM, with a proven track record of architecting and implementing advanced security frameworks.
Minimum 2 years of direct, in‑depth experience with SailPoint Identity Security Cloud (ISC) / IdentityNow – this is essential.
3+ years of demonstrated leadership in guiding technical teams and resources through complex IAM initiatives.
5+ years of proficiency in Java, PowerShell, REST API integration, BeanShell, or database technologies.
Preferred Qualifications
SailPoint Identity Security Engineer & CISSP certification is a huge plus.
Experience in RBAC and Mainframe is preferred.
Strong team player who works well horizontally and vertically with others of varying skill levels.
Ability to clearly define and present solution development ideas in a team environment.
Product/Project management experience.
Extensive experience executing complex, large‑scale Identity Governance and Administration (IGA) implementations, including integrations and customizations.
Education Bachelor’s degree from an accredited university or equivalent work experience (HS diploma + 4 years relevant experience).
Equal Opportunity Employer CVS Health is an affirmative action employer and an equal opportunity employer. We do not discriminate in recruiting, hiring, promotion, or any other personnel action based on race, ethnicity, color, national origin, sex/gender, sexual orientation, gender identity or expression, religion, age, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law. We proudly support and encourage people with military experience (active, veterans, reservists and National Guard) as well as military spouses to apply for CVS Health job opportunities.
Pay Range $130,295.00 - $260,590.00 (base salary). The actual base salary offer will depend on experience, education, geography and other factors.
Benefits Our benefits include affordable medical plan options, a 401(k) plan with matching contributions, an employee stock purchase plan, wellness programs, confidential counseling, financial coaching, paid time off, flexible work schedules, family leave, dependent care resources, colleague assistance programs, tuition assistance, retiree medical access, and more.
Application Window We anticipate the application window for this opening will close on: 11/30/2025.
Qualified Applicants Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state and local laws.
#J-18808-Ljbffr
Position Summary The Staff Security Engineer of IAM will be the architect and lead engineer for SailPoint ISC implementation at CVS Health. This role involves hands‑on engineering of IAM solutions, leading multiple projects, and providing technical direction for SailPoint ISC initiatives. You will shape the company’s identity and access management strategy, ensuring robust security and compliance across the enterprise, and collaborate with cross‑functional teams to deliver scalable, secure, and innovative IAM solutions that support business objectives and regulatory requirements.
Responsibilities
Lead team members through various SailPoint ISC implementation initiatives and features.
Provide technical leadership on foundational IGA capabilities, including Application Onboarding, RBAC, Access Request Configuration, Access Reviews & Lifecycle Events.
Evaluate new product offerings and implement selected use cases, such as NERM, CIEM, Machine Identities, AI Access Review Recommendation, etc.
Ensure platform health and lead day‑to‑day maintenance and upkeep of the platform.
Provide technical leadership for migration efforts from legacy IAM platforms.
Build customizations and API integrations for the SailPoint ISC platform.
Manage implementations and releases via CI/CD strategies.
Required Qualifications
Over 7 years of progressive experience in Identity and Access Management (IAM), delivering secure and scalable solutions.
5+ years of hands‑on technical engineering expertise in IAM, with a proven track record of architecting and implementing advanced security frameworks.
Minimum 2 years of direct, in‑depth experience with SailPoint Identity Security Cloud (ISC) / IdentityNow – this is essential.
3+ years of demonstrated leadership in guiding technical teams and resources through complex IAM initiatives.
5+ years of proficiency in Java, PowerShell, REST API integration, BeanShell, or database technologies.
Preferred Qualifications
SailPoint Identity Security Engineer & CISSP certification is a huge plus.
Experience in RBAC and Mainframe is preferred.
Strong team player who works well horizontally and vertically with others of varying skill levels.
Ability to clearly define and present solution development ideas in a team environment.
Product/Project management experience.
Extensive experience executing complex, large‑scale Identity Governance and Administration (IGA) implementations, including integrations and customizations.
Education Bachelor’s degree from an accredited university or equivalent work experience (HS diploma + 4 years relevant experience).
Equal Opportunity Employer CVS Health is an affirmative action employer and an equal opportunity employer. We do not discriminate in recruiting, hiring, promotion, or any other personnel action based on race, ethnicity, color, national origin, sex/gender, sexual orientation, gender identity or expression, religion, age, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law. We proudly support and encourage people with military experience (active, veterans, reservists and National Guard) as well as military spouses to apply for CVS Health job opportunities.
Pay Range $130,295.00 - $260,590.00 (base salary). The actual base salary offer will depend on experience, education, geography and other factors.
Benefits Our benefits include affordable medical plan options, a 401(k) plan with matching contributions, an employee stock purchase plan, wellness programs, confidential counseling, financial coaching, paid time off, flexible work schedules, family leave, dependent care resources, colleague assistance programs, tuition assistance, retiree medical access, and more.
Application Window We anticipate the application window for this opening will close on: 11/30/2025.
Qualified Applicants Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state and local laws.
#J-18808-Ljbffr