Cybersecurity IAM Engineer

McKesson • Richmond, VA

6d

About The Position

McKesson is hiring a Cybersecurity IAM Engineer to deliver and support enterprise identity and access management solutions. The role focuses on modern authentication, single sign-on, multifactor authentication, identity federation, resilient identity-provider infrastructure, automation, and governance across cloud and hybrid environments. The engineer will work with application, platform, risk, and compliance teams, evaluate IAM technologies, and provide advanced support for production identity issues.

The position requires a bachelor's degree in a relevant discipline or an equivalent combination of education and experience. The posting also lists a bachelor's degree in computer science, information security or assurance, engineering, or a related field; an advanced degree or equivalent experience is preferred. Preferred certifications include CISSP, CISM, Okta credentials, Microsoft Certified: Identity and Access Administrator Associate, or equivalent identity and security credentials.

McKesson Medical-Surgical (MMS), described as a subsidiary and publicly reported segment of McKesson Corporation, is expected to become Wellverse in early 2027. MMS serves alternate and non-acute healthcare markets. The stated base pay range for this position is $98,900–$164,900. Additional compensation, such as an annual bonus or long-term incentives, may be offered. The posting refers candidates to McKesson for benefits information but does not enumerate specific benefits.

Requirements

• Bachelor's degree in IT, computer science, cybersecurity, engineering, or a related field, or an equivalent combination of education and experience.
• 2–5+ years of enterprise IAM engineering experience.
• Hands-on experience with Okta or similar identity platforms.
• Proficiency in SSO and federation protocols: SAML 2.0, OIDC, OAuth 2.0, and WS-Fed.
• Experience engineering, troubleshooting, and scaling resilient identity-provider infrastructure.
• Proficiency in scripting and automation, including PowerShell, Python, or Terraform, and Infrastructure as Code.
• Basic scripting skills in Python, PowerShell, or Bash for automation and reporting.
• Strong foundation in enterprise directory services, including Active Directory and Entra ID, and cloud security.
• Familiarity with GCP and core cloud security principles, including IAM, networking, logging, and encryption.
• Working knowledge of Windows and Linux administration and troubleshooting.
• Understanding of security policies, compliance, and risk management.
• Familiarity with NIST, CIS, ISO 27001, and compliance standards.
• Ability to follow procedures, troubleshoot issues, and document work using tickets and runbooks.
• Strong analytical and troubleshooting skills for complex identity issue triage.
• Strong communication and interpersonal skills, including the ability to escalate issues and collaborate across technical and business teams.
• Adaptability, self-motivation, integrity, and commitment to continuous learning.
• Strong organizational skills to manage and prioritize multiple tasks.
• Willingness to participate in on-call or after-hours incident support.

Nice To Haves

• Advanced degree, or equivalent experience.
• CISSP, CISM, Okta Certified Professional or Administrator, Microsoft Certified: Identity and Access Administrator Associate, or equivalent identity and security credentials.

Responsibilities

• Deliver modern authentication and single sign-on solutions using identity platforms such as Okta and Microsoft Entra ID.
• Configure, optimize, and enforce MFA and conditional-access policies for internal and external application systems.
• Collaborate with application and platform teams to integrate systems and federate identity across domains using SAML 2.0, OAuth 2.0, OIDC, and WS-Fed.
• Support engineering, scaling, and high availability of authentication infrastructure to maintain identity-provider resiliency across platforms.
• Conduct proofs of concept to evaluate and recommend identity and access management technologies aligned with enterprise requirements.
• Perform technical reviews, quality inspections, and code reviews to support consistent IAM engineering practices and compliance standards.
• Develop and automate authentication workflows, joiner-mover-leaver lifecycle processes, and self-service provisioning.
• Debug, troubleshoot, and triage complex production IAM incidents and access issues.
• Partner with risk and compliance stakeholders on SOX, ITGC, and regulatory requirements related to identity lifecycle and access governance.
• Design and maintain non-human identity governance, secrets management, and API access controls across cloud and hybrid environments.

Benefits

• Additional compensation such as an annual bonus or long-term incentive opportunities may be offered; availability is not guaranteed. The posting directs candidates to McKesson for further benefits information but does not list specific benefits.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level