Sr Mgr., Active Directory Identity Access Mgmt. Engineering

Bring your heart to CVS Health. Every one of us at CVS Health shares a single, clear purpose: Bringing our heart to every moment of your health. This purpose guides our commitment to deliver enhanced human-centric health care for a rapidly changing world. Anchored in our brand — with heart at its center — our purpose sends a personal message that how we deliver our services is just as important as what we deliver.
 
Our Heart At Work Behaviors™ support this purpose. We want everyone who works at CVS Health to feel empowered by the role they play in transforming our culture and accelerating our ability to innovate and deliver solutions to make health care more personal, convenient and affordable.

Position Summary
The Senior Manager of Active Directory (AD) Identity and Access Management (IAM) Engineering is a senior leadership role responsible for overseeing and driving the strategic direction, development, and engineering execution of the organization’s IAM program. This individual will lead a team of security engineers, manage Active Directory IAM solutions, and ensure the integrity and security of digital identities across enterprise systems. The Sr. Manager will work closely with IT, security, compliance, and business units to ensure that IAM policies and processes align with organizational goals and regulatory requirements.

Key Duties and Responsibilities:

• Leadership & Strategy:
  • Lead the IAM AD Engineering team to deliver effective identity and access management services and solutions across the organization.
  • Develop and implement the IAM strategy to support the company’s security, compliance, and business objectives.
  • Provide strategic guidance to senior leadership on IAM-related risks, opportunities, and operational needs.
  • Foster a collaborative and high-performance culture within the IAM Engineering and operations team.
  • Build a culture of continuous learning within the team to stay abreast of emerging IAM technologies, trends, and best practices.
  • Establish and manage key performance indicators (KPIs) to measure team performance, IAM system effectiveness, and operational efficiency.

• Engineering Management:
  • Oversee the day-to-day engineering and automation of IAM systems, ensuring their availability, scalability, and performance.
  • Ensure the efficient operation of identity governance processes, such as provisioning, de-provisioning, role-based access controls (RBAC), and user access reviews through automation.
  • Collaborate with IT operations to monitor and resolve IAM-related incidents, ensuring timely response and resolution.
  • Implement and enforce IAM policies, standards, and best practices to ensure alignment with industry standards and regulatory requirements (e.g., GDPR, HIPAA, SOX), including recommended corrective actions as needed.

• Continuous Improvement
  • Identify opportunities for automation, optimization, and modernizations of AD IAM portfolio.
  • Drive initiatives to improve efficiency, reduce operational overhead, and ensure scalability.
  • Implement solutions that provide zero touch administration for both AD IAM Engineering and Operations teams.

• Risk & Compliance:
  • Identify and mitigate risks associated with identity management, including insider threats, credential abuse, and data breaches.
  • Ensure that IAM practices and controls meet regulatory compliance and audit requirements.
  • Prepare and present periodic reports to executive leadership on IAM performance, risk posture, and compliance status.

• Team Management & Development:
  • Manage and mentor a team of AD IAM engineers, providing career development, training, and performance management.
  • Build a culture of continuous learning within the team to stay abreast of emerging IAM technologies, trends, and best practices.
  • Establish and manage key performance indicators (KPIs) to measure team performance, IAM system effectiveness, and operational efficiency.

Required Qualifications:
 

•  7+ years of experience in Active Directory or related IAM security domains.
•  7+ years of experience in Active Directory integrations, identity governance, and privileged access management
•  5+ years of experience in IAM tools and technologies such as Okta or SailPoint or Microsoft Identity Manager, or equivalent.
•  5+ years of experience with cloud IAM solutions (e.g., AWS IAM, Azure AD, Google Identity) is highly preferred.
•  5+ years of experience with managing IAM operations in large-scale, comp