Software Engineer – Identity & Access Management
About The Position
McKesson is seeking a Software Engineer with strong Identity & Access Management (IAM) experience to design, build, integrate, and support authentication and authorization capabilities across CoverMyMeds' platforms. The role is part of a core IAM platform team responsible for end-user identity, federated authentication, and authentication infrastructure for web applications. The engineer will work closely with Engineering, Security, and Product teams to deliver secure, reliable identity solutions. Candidates should bring hands-on identity engineering experience and software-development capability; they may build further application-development and platform-engineering depth on the team. The role includes developing and maintaining identity services and integrations, applying secure-engineering practices, documenting solutions, and participating in operational support for critical identity services as needed. The team works within SCRUM and SAFe Agile frameworks, manages work flow, and continually improves quality and throughput. The position prioritizes candidates in the Columbus, Ohio metropolitan area. McKesson cannot provide sponsorship for this role now or in the future.
Requirements
- Typically 4 or more years of relevant professional experience, or equivalent demonstrated experience.
- Hands-on experience implementing, integrating, or supporting enterprise identity and authentication solutions.
- Experience with at least one modern identity platform, such as Okta, Auth0, Ping Identity, or Microsoft Entra ID.
- Practical experience with one or more modern identity standards, such as OAuth 2.0, OIDC, or SAML.
- Demonstrated software-development experience using a language such as JavaScript/TypeScript, Ruby, Python, or C#.
- Experience integrating applications, APIs, or services with authentication and authorization capabilities.
- Working knowledge of secure software-development practices and common authentication and authorization risks.
Nice To Haves
- Deep hands-on experience with Okta and/or Auth0, including applications, policies, claims, and federation.
- Experience designing or building identity infrastructure or authentication services in a production environment.
- Advanced experience with OAuth 2.0, OIDC, SAML, SSO, MFA, federation, token management, and session management.
- Experience with SMART on FHIR, SCIM, directory integrations, or identity lifecycle management.
- Experience with RBAC, ABAC, claims-based authorization, or policy engines.
- Experience supporting identity capabilities in regulated environments.
- Experience improving the reliability and observability of production authentication systems.
- An enterprise-first mindset and ability to constructively challenge designs while contributing new ideas.
Responsibilities
- Design, build, and maintain authentication and authorization capabilities using OAuth 2.0, OpenID Connect (OIDC), and SAML.
- Integrate applications and APIs with identity platforms such as Okta, Auth0, Ping Identity, or Microsoft Entra ID.
- Implement and support SSO, MFA, federation, claims, access policies, session management, and secure token handling.
- Contribute to identity services such as login gateways, authorization middleware, claims transformation, and policy enforcement.
- Troubleshoot authentication and federation issues across applications and identity platforms.
- Support SMART on FHIR authentication use cases and broader unified-authentication initiatives.
- Build and maintain production identity services and integrations using languages such as JavaScript/TypeScript, Ruby, Python, or C#.
- Develop clean, testable, and maintainable code using established practices, including automated testing, code review, and CI/CD.
- Work with APIs and services that integrate identity capabilities into applications.
- Create documentation for identity integrations, APIs, and operational support.
- Participate in operational support for critical identity services as needed.
- Apply secure-engineering principles, including least privilege, secure defaults, defense in depth, and secure secret handling.
- Partner with Security on threat modeling, risk reviews, and secure software-development practices.
- Collaborate with Engineering, Security, and Product to turn authentication and authorization requirements into technical solutions.
- Contribute technical judgment and ideas as the team evolves its identity architecture and platform capabilities.
- Work within SCRUM and SAFe Agile frameworks, managing flow and continuously improving quality and throughput.
- Collaborate across Product, Security, and Engineering to define outcomes and manage technical tradeoffs.
Benefits
- Competitive compensation package
- An annual bonus or long-term incentive opportunities may be offered
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Education Level
No Education Listed
