Software Engineer – Identity & Access Management

McKesson•Columbus, OH

About The Position

McKesson is seeking a Software Engineer with strong Identity & Access Management (IAM) experience to design, build, integrate, and support authentication and authorization capabilities across CoverMyMeds' platforms. The role is part of a core IAM platform team responsible for end-user identity, federated authentication, and authentication infrastructure for web applications. The engineer will work closely with Engineering, Security, and Product teams to deliver secure, reliable identity solutions. Candidates should bring hands-on identity engineering experience and software-development capability; they can further develop their application-development and platform-engineering depth on the team. The role includes building production identity services and integrations, supporting authentication standards and platforms, applying secure-engineering practices, documenting integrations and APIs, and helping operate critical identity services. The team works within SCRUM and SAFe Agile frameworks and values collaboration, technical judgment, continuous improvement, and an enterprise-first mindset. Priority will be given to candidates who reside in the Columbus, Ohio metropolitan area. McKesson is unable to provide sponsorship for this role now or in the future.

Requirements

Typically 4+ years of relevant professional experience or equivalent demonstrated experience.
Hands-on experience implementing, integrating, or supporting enterprise identity and authentication solutions.
Experience with at least one modern identity platform such as Okta, Auth0, Ping Identity, or Microsoft Entra ID.
Practical experience with one or more modern identity standards such as OAuth 2.0, OIDC, or SAML.
Demonstrated software-development experience using a language such as JavaScript/TypeScript, Ruby, Python, or C#.
Experience integrating applications, APIs, or services with authentication and authorization capabilities.
Working knowledge of secure software-development practices and common authentication and authorization risks.

Nice To Haves

Deep hands-on experience with Okta and/or Auth0, including applications, policies, claims, and federation.
Experience designing or building identity infrastructure or authentication services in a production environment.
Advanced experience with OAuth 2.0, OIDC, SAML, SSO, MFA, federation, token management, and session management.
Experience with SMART on FHIR, SCIM, directory integrations, or identity lifecycle management.
Experience with RBAC, ABAC, claims-based authorization, or policy engines.
Experience supporting identity capabilities in regulated environments.
Experience improving the reliability and observability of production authentication systems.

Responsibilities

Design, build, and maintain authentication and authorization capabilities using OAuth 2.0, OpenID Connect (OIDC), and SAML.
Integrate applications and APIs with identity platforms such as Okta, Auth0, Ping Identity, or Microsoft Entra ID.
Implement and support SSO, MFA, federation, claims, access policies, session management, and secure token handling.
Contribute to identity services such as login gateways, authorization middleware, claims transformation, and policy enforcement.
Troubleshoot authentication and federation issues across applications and identity platforms.
Support SMART on FHIR authentication use cases and broader unified-authentication initiatives.
Build and maintain production identity services and integrations using languages such as JavaScript/TypeScript, Ruby, Python, or C#.
Develop clean, testable, maintainable code using established engineering practices, including automated testing, code review, and CI/CD.
Work with APIs and services that integrate identity capabilities into applications.
Create documentation for identity integrations, APIs, and operational support.
Participate in operational support for critical identity services as needed.
Apply secure-engineering principles, including least privilege, secure defaults, defense in depth, and secure secret handling.
Partner with Security on threat modeling, risk reviews, and secure software-development practices.
Collaborate across Engineering, Security, and Product to translate authentication and authorization requirements into technical solutions.
Contribute technical judgment and ideas as the team evolves its identity architecture and platform capabilities.
Work within SCRUM and SAFe Agile frameworks, managing flow and continuously improving quality and throughput.
Collaborate across Product, Security, and Engineering to define outcomes and manage technical tradeoffs.