Staff Security Engineer - Active Directory

About this role

We’re building a world of health around every individual — shaping a more connected, convenient and compassionate health experience. At CVS Health®, you’ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger – helping to simplify health care one person, one family and one community at a time.

Position Summary

As an Staff Security Engineer – Active Directory on our team, you will serve as a technical authority responsible for the design, security, and long‑term health of a large enterprise, multi‑domain Active Directory environment in a hybrid on‑prem and Azure cloud configuration. This role is primarily focused on Microsoft Entra ID, with Active Directory serving as a foundational dependency within a hybrid identity architecture rather than the center of gravity.

You will lead cloud identity security initiatives, drive Entra ID architecture and governance decisions, and act as a senior escalation point for identity‑related incidents and risks. In addition to hands‑on engineering, you will partner closely with Cybersecurity, IAM, Infrastructure, and Audit teams to ensure Entra ID and hybrid identity services are resilient, compliant, and aligned with Zero Trust with enterprise security objectives.

Key Duties and Responsibilities

• Architect, secure, and oversee enterprise multi‑domain Active Directory environments in hybrid configurations with Azure, including Azure AD Connect and identity synchronization strategies
• Provide senior‑level administration and security engineering for Azure Active Directory (Microsoft Entra ID), including identity protection, authentication methods, and access governance
• Design, implement, and continuously improve Entra ID Conditional Access, privileged access models, and identity security controls
• Lead analysis and response efforts for complex identity‑related security inciden...