Infrastructure & Identity Architect

An Infrastructure & Identity Architect is critical to the infrastructure that underpins Identity Management by deciding how users, devices, and applications authenticate and access resources securely, drives automation, and supports Cencora's growth through acceleration of mergers/acquisitions. This role will define identity standards and target architecture (e.g., Active Directory and Microsoft Entra), choose authentication methods (SSO, MFA, Conditional Access), and design authorization models (roles, least privilege, privileged access). They ensure identity services are resilient, compliant, and scalable, guide integrations using common protocols (SAML/OIDC/OAuth), and lead modernization efforts such as hybrid identity and legacy auth retirement.

The Infrastructure Architect will provide technical leadership, drive high-level decision-making, and design long-term strategies for our Identity Infrastructure. This role requires expertise in aligning technology solutions with Cencora's operations and business objectives. Locating this position in the U.S. ensures alignment with strategic priorities, real-time collaboration with ISO / IAM stakeholders, and seamless integration with U.S.-based teams.

This individual will work directly with me to design current and future Identity Infrastructure and collaborate closely with U.S.-based architects and engineering teams from ISO and Identity Management. While proximity to the Conshohocken HQ is preferred, a permanent remote U.S.-based arrangement is acceptable.

As the technical lead for Directory and Authentication infrastructure, this position specializes in Microsoft Entra, Windows Active Directory, and related identity platforms. This architect is responsible for designing and implementing identity solutions that enhance security, reliability, and usability across the enterprise. The infrastructure supports identity management, strengthens security controls, delivers a seamless user experience, and improves IT operational efficiency.

In this role, the Architect for Directory and Authentication is responsible for:

Identity Infrastructure Design:

• Develop and maintain architecture for identity management solutions that align with organizational strategies.

• Design and implement technical road maps to meet requirements for on-prem and cloud hosted technologies

• Partner with Identity Management organization to enable identity lifecycle automation (joiner-mover-leaver) and privileged access management (PAM).

Business Identity Solutions:

• Create solutions that address business needs while ensuring secure access to systems and data.

• Recommend opportunities to improve user experience while ensuring authentication is secured against threats

• Consult with project teams to recommend Identity Infrastructure options new applications and new acquisitions

Technological Innovation:

• Incorporate advanced technologies like AI and machine learning to enhance identity verification and governance.

• Stay updated on emerging trends in identity management and adapt solutions accordingly.

• Plan and deploy Conditional Access policies to enforce secure access controls leveraging Entra features, such as risk-based Conditional Access.

Collaboration and Integration:

• Work with cross-functional teams to integrate identity solutions with existing IT infrastructure.

• Ensure seamless collaboration across platforms while maintaining security.

User Experience:

• Focus on creating intuitive and user-friendly identity solutions.

• Balance security measures with ease of access for end-users.

Education & Experience Qualifications:

• Bachelor's degree in Computer Science, Information Systems, Computer Engineering, System Analysis or a related field. Or equivalent work experience.

• Qualifications often include deep knowledge of identity and access management (IAM) principles, experience with Microsoft Entra and Windows Active Directory, and relevant certifications.

• Strong analytical and problem-solving skills, along with the ability to communicate complex concepts to technical and non-technical audiences, are essential.

• Typically has a minimum of four to seven (4-7) years of experience in multiple IT areas with at least two to four (2-4) years of relevant domain experience (data, network, application, systems, etc.).

• Requires advanced to expert level knowledge and understanding of architecture, application design, system engineering and integration.

• Proficient communication skills and experience in mentoring/leading teams

• Ability to translate complicated business requirements into multiple solution options and explain the pros/cons of various approaches

• Excellent written and verbal communication skills

• Ability to work well both independently as well as within a team oriented environment

We provide compensation, benefits, and resources that enable a highly inclusive culture and support our team members' ability to live with purpose every day. In addition to traditional offerings like medical, dental, and vision care, we also provide a comprehensive suite of benefits that focus on the physical, emotional, financial, and social aspects of wellness. This encompasses support for working families, which may include backup dependent care, adoption assistance, infertility coverage, family building support, behavioral health solutions, paid parental leave, and paid caregiver leave. To encourage your personal growth, we also offer a variety of training programs, professional development resources, and opportunities to participate in mentorship programs, employee resource groups, volunteer activities, and much more. For details, visit https://www.virtualfairhub.com/cencora

*This Salary Range reflects a National Average for this job. The actual range may vary based on your locale. Ranges in Colorado/California/Washington/New York/Hawaii/Vermont/Minnesota/Massachusetts/Illinois State-specific locations may be up to 10% lower than the minimum salary range, and 12% higher than the maximum salary range.

Cencora is committed to providing equal employment opportunity without regard to race, color, religion, sex, sexual orientation, gender identity, genetic information, national origin, age, disability, veteran status or membership in any other class protected by federal, state or local law.

The company's continued success depends on the full and effective utilization of qualified individuals. Therefore, harassment is prohibited and all matters related to recruiting, training, compensation, benefits, promotions and transfers comply with equal opportunity principles and are non-discriminatory.

Cencora is committed to providing reasonable accommodations to individuals with disabilities during the employment process which are consistent with legal requirements. If you wish to request an accommodation while seeking employment, please call 888.692.2272 or email hrsc@cencora.com. We will make accommodation determinations on a request-by-request basis. Messages and emails regarding anything other than accommodations requests will not be returned

.