Cybersecurity IAM Engineer

McKesson•Richmond, VA

7d•$98,900 - $164,900

About The Position

McKesson is seeking a Cybersecurity IAM Engineer to deliver and support enterprise identity and access management solutions. The role focuses on modern authentication and single sign-on using identity platforms such as Okta and Microsoft Entra ID, as well as MFA, conditional access, identity federation, and resilient authentication infrastructure. The engineer will integrate applications and platforms, evaluate IAM technologies, automate identity workflows, and provide advanced production troubleshooting. The position also supports identity-related compliance and risk requirements and governs non-human identities, secrets, and API access across cloud and hybrid environments. The role is part of McKesson Medical-Surgical (MMS), a McKesson subsidiary and publicly reported segment serving healthcare providers outside traditional hospitals. MMS is expected to become Wellverse in early 2027. McKesson describes itself as an impact-driven Fortune 10 company and offers a competitive compensation package; the stated base pay range for this position is $98,900–$164,900, with other compensation such as annual bonus or long-term incentives potentially offered.

Requirements

Bachelor's degree in IT, Computer Science, Cybersecurity, Engineering, or a related field, or an equivalent combination of education and experience.
2–5+ years of enterprise IAM engineering experience.
Ability to follow procedures, troubleshoot issues, and document work through tickets and runbooks.
Understanding of security policies, compliance, and risk management.
Strong communication skills, including the ability to escalate issues and collaborate across teams.
Adaptability, self-direction, integrity, and commitment to continuous learning.
Basic scripting skills in Python, PowerShell, or Bash for automation and reporting.
Working knowledge of Windows and Linux administration and troubleshooting.
Strong organizational skills to manage and prioritize multiple tasks.
Willingness to participate in on-call or after-hours incident support.
Hands-on experience with Okta or a similar identity platform.
Proficiency with SSO and federation protocols including SAML 2.0, OIDC, OAuth 2.0, and WS-Fed.
Experience engineering, troubleshooting, and scaling resilient identity provider infrastructure.
Proficiency in scripting and automation, including PowerShell, Python, or Terraform, and Infrastructure as Code.
Strong foundation in enterprise directory services such as Active Directory and Entra ID, and in cloud security.
Strong analytical and troubleshooting skills for complex identity issue triage.
Effective interpersonal and communication skills across technical and business stakeholders.
Familiarity with GCP and core cloud security principles, including IAM, networking, logging, and encryption.
Familiarity with security frameworks such as NIST, CIS, and ISO 27001 and with compliance standards.

Nice To Haves

Advanced degree preferred, or equivalent experience.
Preferred certifications include CISSP, CISM, Okta Certified Professional or Administrator, Microsoft Certified: Identity and Access Administrator Associate, or equivalent identity and security credentials.

Responsibilities

Deliver modern authentication and single sign-on solutions using identity platforms such as Okta and Microsoft Entra ID.
Configure, optimize, and enforce MFA and conditional access policies for internal and external application systems.
Collaborate with application and platform teams to integrate systems and federate identity across domains using SAML 2.0, OAuth 2.0, OIDC, and WS-Fed.
Support the engineering, scaling, and high availability of authentication infrastructure to maintain identity provider resiliency.
Conduct proofs of concept to evaluate and recommend identity and access management technologies aligned with enterprise requirements.
Perform technical reviews, quality inspections, and code reviews to promote consistent IAM engineering practices and compliance.
Develop and automate authentication workflows, joiner-mover-leaver lifecycle processes, and self-service provisioning.
Provide advanced debugging, troubleshooting, and issue triage for complex production IAM incidents and access problems.
Partner with risk and compliance stakeholders on SOX, ITGC, and regulatory requirements related to identity lifecycle and access governance.
Design and maintain non-human identity governance, secrets management, and API access controls across cloud and hybrid environments.