Senior Identity and Access Management Engineer

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve - we care. What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow's health today, we want to hear from you.

Job title: Senior Identity and Access Management Engineer

Work location: Irving, TX / The Woodlands, TX / Atlanta, GA / Richmond VA / Columbus OH

Essential Responsibilities and Functions:

• Deliver modern access management integrations flawlessly for B2B, B2C and B2E customers using Okta, Ping, Azure AD.
• Strong experience in Okta versions, Okta Classic and Okta Identity Engine (OIE).
• Good experience in engineering identity orchestration and resiliency solutions using tools such as Strata's Maverics Identity Orchestration software and/or other comparable industry solutions.
• Strong experience in the development of authentication and approval workflows in Okta
• Strong experience in configuring and enabling Single-Sign On (SSO) and Multi-factor authentication (MFA) for internal or external facing application systems.
• Good experience in engineering adaptive and behavioral authentication solutions.
• Good experience in Okta Access Gateway (OAG) and/or other comparable industry access gateway solutions.
• Work with Product and Application Teams closely to collaborate with other engineers and teams to implement new features, improvements, and fixes that are needed to handle our current and future scale.
• Lead the collaboration and discussion with business, application, and system stakeholders on meeting the Identity and Access Management (IAM) policies and standards through adopting enterprise IAM solutions or identifying alternatives on exceptions.
• Lead design and code review and perform quality inspections to ensure the consistent application of good engineering practices in adherence with McKesson standards, processes, and best practices.
• Partner with Leadership in implementing IAM processes per the evolving needs of the team and the solutions.
• Collaborate with business and technical partners to identify and scope the opportunities, quantify costs, outline potential value and ROI, identify risks, benefits, and constraints.
• Socialize and collaborate on IAM strategy with senior leadership and executives.
• Ensure compliance with audit requirements by proactively educating the teams on compliance requirements and integrating compliance requirements in their applications and systems.
• Identify opportunities to update the IAM policies and standards to align with evolving security, industry, and business requirements.
• Perform Proofs of Concepts (PoCs) to assess and identify the technologies per the needs of the organization.
• Develop documentation templates and direct and enforce the development of documentation throughout the development lifecycle of the solution.
• Seek opportunities to modify and enhance standards per the needs of the department.
• Provide recommendation to Senior Management on selection of technologies and strategic technical direction for the department.
• Develop multi-year next generation CAM strategy and roadmap.
• Abide by McKesson's security policies and practices.

Critical / Required Skills

• 5+ years' hands on experience developing/configuring access management solution using Okta or other Access Management products (E.G; Auth0, Azure, PingFederate etc.)
• 5+ years of integration experience with SSO leveraging industry protocols such as SAML, OpenID Connect, OAuth and WS-FED
• 5+ years' experience in the field of Identity and Access Management
• 2+ years of experience of engineering orchestration and impersonation solutions using Strata's Maverics Identity Orchestration software and/or other comparable industry solutions.
• 2+ years of development experience developing solutions using modern development languages (java, python, JavaScript, .net etc.)
• 2+ years' experience with security compliance, governance, audit, and risk management.
• Working knowledge of cloud-based systems, virtualization, container orchestration, and common application architectures.
• Experience integrating and federating different IDM technologies across multiple domains.
• Understanding of enterprise identity infrastructure and core security concerns of cloud and on-premises environments.
• Strong analytical and problem-solving skills, pride in ownership and ability to troubleshoot complex IAM issues.
• Excellent communication and interpersonal skills, with the ability to collaborate effectively with both technical and non-technical stakeholders.

Preferred Skills:

• Experience in Business continuity and resiliency
• Programming languages (PowerShell, Python, Ansible, Terraform, etc.)
• Advanced manipulation of authentication and authorization tokens (SAML assertions, OAuth claims, grants, and scopes, etc.)
• Certifications such as CISSP, CISM, Okta, or Azure are a plus.

Education:

• 4-year degree in IT or related field or equivalent experience

Physical Requirements: General Office Demands

Candidate must be authorized to work in the U.S, now or in the future, without support from McKesson.

Relocation is NOT budgeted for this position.

#LI-TV

At McKesson, we care about the well-being of the patients and communities we serve, and that starts with caring for our people. That's why we have a Total Rewards package that includes comprehensive benefits to support physical, mental, and financial well-being. Our Total Rewards offerings serve the different needs of our diverse employee population and ensure they are the healthiest versions of themselves. For more information regarding benefits at McKesson, please click here.

As part of Total Rewards, we are proud to offer a competitive compensation package at McKesson. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered.

Our Base Pay Range for this position

$110,000 - $183,300

McKesson is an Equal Opportunity/Affirmative Action employer.

All qualified applicants will receive consideration for employment without regard to race, color, religion, creed, sex, sexual orientation, gender identity, national origin, disability, or protected Veteran status.Qualified applicants will not be disqualified from consideration for employment based upon criminal history.

McKesson is committed to being an Equal Employment Opportunity Employer and offers opportunities to all job seekers including job seekers with disabilities. If you need a reasonable accommodation to assist with your job search or application for employment, please contact us by sending an email to [email protected]. Resumes or CVs submitted to this email box will not be accepted.

Current employees must apply through the internal career site.

Join us at McKesson!