Senior Identity & Access Management (IAM) Engineer – Okta

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve – we care.

What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow’s health today, we want to hear from you.

• →Design, implement, and support enterprise IAM solutions with a strong focus on Okta
• →Lead the engineering and administration of Okta Identity Engine, Okta Workflows, and adaptive/risk-based access controls
• →Build and maintain secure authentication and federation integrations using SSO, SAML, OIDC, OAuth 2.0, SCIM, LDAP, and related standards
• →Engineer and improve identity lifecycle management processes, including provisioning, deprovisioning, joiner/mover/leaver workflows, and delegated administration
• →Integrate Okta with cloud, SaaS, and on-prem applications using APIs, provisioning connectors, and automation
• →Develop scripts and tooling using PowerShell, Python, JavaScript, or similar technologies to automate identity operations and improve platform efficiency
• →Partner with cross-functional teams to embed identity and access requirements into system and application design
• →Troubleshoot complex identity, access, authentication, and provisioning issues across enterprise environments
• →Recommend and implement improvements to IAM controls, architecture, and processes to reduce risk and enhance user experience
• →Create and maintain technical documentation, standards, and operational runbooks
• →Provide technical leadership and mentor junior team members

• Typically requires 7+ years of experience in identity and access management, cybersecurity engineering, or related infrastructure/security roles
• Hands-on experience engineering and supporting Okta in an enterprise environment
• Hands-on experience with Okta Identity Engine, Okta Workflows, and adaptive access policies
• Strong experience with SSO, federation, MFA, SAML, OIDC, OAuth 2.0, SCIM, LDAP, and directory services
• Experience with identity lifecycle management, provisioning/deprovisioning, and access control models
• Scripting/automation experience with PowerShell, Python, JavaScript, or similar

• Experience with Universal Directory, delegated administration, API gateways, and service-to-service authentication/authorization
• Bachelor’s degree or equivalent combination of education and experience
• Experience contributing to IAM standards, architecture decisions, and platform roadmaps
• Experience mentoring engineers and leading technical delivery
• Okta certifications or other relevant IAM/security certifications

At McKesson, we care about the well-being of the patients and communities we serve, and that starts with caring for our people. That’s why we have a Total Rewards package that includes comprehensive benefits to support physical, mental, and financial well-being. Our Total Rewards offerings serve the different needs of our diverse employee population and ensure they are the healthiest versions of themselves.

As part of Total Rewards, we are proud to offer a competitive compensation package at McKesson. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy, and pay will always be compliant with any applicable regulations.  In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered. 

McKesson has become aware of online recruiting-related scams in which individuals who are not affiliated with or authorized by McKesson are using McKesson’s (or affiliated entities, like CoverMyMeds or RxCrossroads) name in fraudulent emails, job postings or social media messages. In light of these scams, please bear the following in mind:

McKesson Talent Advisors will never solicit money or credit card information in connection with a McKesson job application.

McKesson Talent Advisors do not communicate with candidates via online chatrooms or using email accounts such as Gmail or Hotmail. Note that McKesson does rely on a virtual assistant (Gia) for certain recruiting-related communications with candidates.

McKesson job postings are posted on our career site: careers.mckesson.com.