Lead Engineer Non-human Identity Management
Job Summary
Our team members are at the heart of everything we do. At Cencora we are united in our responsibility to create healthier futures and every person here is essential to us being able to deliver on that purpose. If you want to make a difference at the center of health come join our innovative company and help us improve the lives of people and animals everywhere. Apply today!
Position Overview:
The Lead Engineer IAM will deliver and manage large and complex Identity and Access Management initiatives across the business with the goals of improving efficiency increasing security posture and supporting aggressive growth. The Lead Engineer will be expected to work in the Non-Human Identity Management space.
Key Responsibilities:
Drive the design implementation and management of Privileged Access Management Services which includes management of privileged accounts secure access to Cencora resources (on premise and in the cloud) secure management of credentials session management zero standing privilege model just-in-time privilege access and Identity & Access Analytics.
Drive and manage Non-Human Identity Management (NHIM).
Understand a variety of IAM-related product suites and tools to make critical operational and strategic decisions with a focus on NHI discovery ownership attestation and risk reduction.
Lead the development and implementation of prudent enterprise security standards guidelines and procedures to protect the integrity availability and privacy of all corporate information assets.
Ensure Identity and Access Management Services follow appropriate policies procedures operational considerations IT change control and IT risk and compliance management programs.
Directly partner with the enterprise Finance Legal Audit and Compliance executives to support Internal and External Audits relating to IAM (SOX COBIT IT Controls)
Working with ISO Risk Organization supporting the Business Unit and IT executives through the process of prioritizing security initiatives and spending based on relevant business risk and regulatory compliance issues financial implications and alignment with the corporate strategic plan.
Support strategic and tactical security risk mitigation and regulatory compliance guidance for all IT projects including the evaluation of enterprise policies processes operating procedures and governance controls
This job profile description is a standardized non-contractual reference description and global reference tool provided for organizational consistency and talent architecture purposes across Cencora. It does not alter actual job duties responsibilities reporting lines working conditions grading compensation or other essential terms and conditions of employment. Actual duties and responsibilities may vary based on business needs local requirements and operational practices. Where a team members role is governed by an employment agreement local terms and conditions prior job description or collective bargaining agreement those documents shall prevail in case of any inconsistency. Mandatory local laws shall also prevail.
.
Required Qualifications:
Bachelors degree in computer science information technology cybersecurity software engineering or a related field or equivalent experience.
Typically requires 10 years of combined IT and security work experience with a broad range of exposure to Identity and Access Management functions with a focus on Privileged Access Management and over 5 years experience designing and deploying Identity and Access Management solutions at the enterprise level.
Experience managing NHIs in a large and complex enterprise.
Experience designing managing and supporting IAM and PAM products: BeyondTrust Password Safe BeyondTrust Endpoint Privilege Management (EPM) BeyondTrust Privileged Remote Access SSH Key Management MFA SIEM Azure Entra Active Directory Linux PowerShell scripts etc.
Experience leading technical teams in a large and complex environment to deliver related capabilities and services.
Demonstrated successful implementation of security control frameworks and standards such as ISO 27001 ISO 17799 COBIT ITIL NIST and PCI.
Certification in Information Security relevant areas such as Audit (CISA) Security Management (CISM) Security Professional (CISSP) and/or equivalent business experience in a matrix Organization required.
Benefit offerings outside the US may vary by country and will be aligned to local market practice. The eligibility and effective date may differ for some benefits and for team members covered under collective bargaining agreements.
Full timeCencora is committed to providing equal employment opportunity without regard to race color religion sex sexual orientation gender identity genetic information national origin age disability veteran status or membership in any other class protected by federal state or local law.
The companys continued success depends on the full and effective utilization of qualified individuals. Therefore harassment is prohibited and all matters related to recruiting training compensation benefits promotions and transfers comply with equal opportunity principles and are non-discriminatory.
Cencora is committed to providing reasonable accommodations to individuals with disabilities during the employment process which are consistent with legal requirements. If you wish to request an accommodation while seeking employment please call 888.692.2272 or email . We will make accommodation determinations on a request-by-request basis. Messages and emails regarding anything other than accommodations requests will not be returned
Required Experience:
Senior IC
About Company
Discover how Cencora delivers innovative cell and gene therapy solutions, enhancing patient access, affordability, and connectivity across treatment journeys.