C

Covetrus

Global animal-health distributor and veterinary software

Lead Identity and Access Management Engineer

Security Engineering & ArchitectureConfirmed live in the last 24 hours
Full-timeRemote in USA

About the Job

Requirements

  • A bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field, or equivalent professional experience in lieu of a degree.
  • At least 8 years of progressive information security or information technology experience, including at least 4 years focused on Identity and Access Management, with a track record of using automation and engineering discipline to reduce risk and manual effort.
  • At least 3 years as a senior or lead technical contributor to an IAM function or program in a mid-to-large enterprise of 5,000 or more employees, with accountability for security outcomes and operational metrics.
  • Hands-on experience designing, building, and operating enterprise IAM automation, including workflow engines, API- or SCIM-based provisioning pipelines, and self-service access solutions that eliminate manual, ticket-based processes.
  • Experience integrating joiner, mover, and leaver automation with an HRIS platform such as Workday or SAP SuccessFactors to enable straight-through processing and eliminate manual provisioning touchpoints.
  • Experience automating enterprise-scale access certification and recertification campaigns to reduce audit preparation time and manual reviewer effort.
  • Experience supporting compliance and security audits such as SOX, SOC 2, ISO 27001, or HIPAA, with a focus on repeatable, automated evidence collection and control monitoring.
  • Experience managing production PAM programs and vault platforms such as CyberArk, BeyondTrust, or Delinea, including automating credential rotation, session monitoring, and just-in-time access.
  • Demonstrated success building data-driven business cases that convert automation and tooling consolidation into measurable cost savings and licensing efficiencies.
  • A strong engineering mindset and ability to design, script, and deploy automated identity workflows using SCIM, LDAP, and REST/API connectors rather than relying on manual or ticket-driven processes.
  • Ability to identify high-friction manual IAM operations and redesign them as scalable, self-service automated solutions.
  • Skill in building automated provisioning, de-provisioning, and entitlement-review pipelines across SaaS, cloud, and on-premises systems.
  • Ability to work with scripting and automation tools such as PowerShell, Python, and workflow orchestration platforms to extend platform capabilities.
  • Working knowledge of authentication and federation protocols including SAML 2.0, OAuth 2.0, OpenID Connect, Kerberos, LDAP, and LDAPS.
  • Knowledge of Zero Trust architecture, conditional access, and least-privilege enforcement.
  • Ability to harden IAM and PAM environments against credential theft, privilege escalation, and lateral movement, and to translate threat intelligence into control improvements.
  • Skill in defining and tracking security KPIs, including orphaned accounts, privilege sprawl, stale entitlements, and MFA or phishing-resistant authentication coverage.
  • A track record of reducing manual operations, ticket volume, and mean time to provision through automation and process redesign.
  • Ability to design identity automation for scale and resilience across M&A integrations, organizational changes, and growth.
  • Skill in building dashboards and metrics that give leadership visibility into program health and operational throughput.
  • Ability to build and present data-driven financial business cases for tooling consolidation, license optimization, and platform rationalization.
  • Skill in quantifying automation ROI, including labor hours saved, ticket deflection, and reduced audit remediation costs.
  • Vendor and contract management skills, including managing IAM licensing to avoid overspend and redundant tooling.
  • Ability to collaborate cross-functionally with IT, HR, Legal, Compliance, Cyber, and Procurement to align automation initiatives with business and audit requirements.
  • Ability to translate technical automation and security work into business impact and cost-savings narratives for executive leadership.
  • Travel as required to remote locations to provide project and technology services.
  • Ability to work on call and extended hours, including nights and weekends, as needed.

Responsibilities

  • Own the strategy, operations, and roadmap for enterprise Identity and Access Management, protecting workforce members, applications, and data through appropriate access controls.
  • Serve as the North American IAM Center of Excellence lead and partner with global counterparts to align standards, tools, and practices and ensure consistent global IAM services.
  • Serve as technical lead for IAM integration during current and future mergers, acquisitions, and divestitures.
  • Lead the design, implementation, and operation of IAM programs, including single sign-on, multifactor authentication, privileged access management, identity governance and administration, and directory services.
  • Lead product evaluations, tool consolidations, and IAM initiatives supported by data-driven financial business cases to deliver measurable cost savings and operational efficiencies.
  • Enforce IAM policies and standards and create procedures aligned with NIST, CIS, ISO 27001, SOX, and other applicable frameworks.
  • Own user lifecycle management, including joiner, mover, and leaver execution, access provisioning, role engineering, and automated de-provisioning.
  • Drive IAM automation and self-service capabilities, including automated access requests, approvals, and provisioning, to reduce manual operations and improve end-user service.
  • Partner with End User Services and the Service Desk to identify and automate manual, ticket-based access requests through self-service and automated workflows.
  • Deliver automated entitlement and permission reviews across SaaS, cloud, and on-premises applications.
  • Mature privileged access management adoption, including vault adoption, session monitoring, and just-in-time access.
  • Partner with Cyber and Network Operations on global user controls, including Zero Trust and single sign-on group management, and lead identity-centric network access controls and conditional access policy development.
  • Build and maintain integrations between IAM platforms, HR systems, ticketing systems, and downstream applications using SCIM, LDAP, and API connectors.
  • Define KPIs and metrics for access hygiene, orphaned accounts, and privilege sprawl, and report SLA performance and program health to leadership quarterly.
  • Partner across teams to advance the IAM roadmap and support IAM vendor relationships, licensing, and contract renewals with Cyber and Procurement.
  • Mentor IAM engineers and analysts in design, implementation, troubleshooting, and best practices.
  • Support audits, including SOX, SOC 2, and ISO 27001, with evidence of quarterly access reviews, control narratives, and remediation tracking.
  • Plan the IAM roadmap on a 12–18 month horizon, balancing security improvements with employee experience.

Desired Qualifications

  • Relevant industry certifications, such as CISSP, CIAM, SC-300, Okta Certified Professional, or equivalent.

About the Company

Covetrus

Global animal-health distributor and veterinary software

Covetrus is a global animal-health technology and services company that combines the distribution of veterinary pharmaceuticals, vaccines, and medical supplies with cloud-based software and services. Its core product is an integrated platform that connects practice management software, prescription management, and client communications to Covetrus’s online pharmacy and home delivery. The company differentiates itself by providing an end-to-end solution that merges physical distribution with digital tools and data analytics in one ecosystem, helping veterinary practices run procurement, care, and administration while retaining revenue. Its goal is to streamline veterinary workflows, enhance client engagement, and support practice growth on a global scale.

Company size
1,001-5,000
Company stage
IPO
Headquarters
Portland, ME
Founded
2019

Recently Posted Jobs

Explore more opportunities at Covetrus

See more jobs