Identity & Access Security Engineer – SSO & MFA Expert

McKesson; Richmond (VA); On-site; USD 99,000 - 165,000; Full time

Job summary

McKesson is seeking an experienced IAM engineer to deliver enterprise authentication, MFA, and federation across cloud and on‑prem systems. You will work with Okta, Entra ID, SAML, OAuth, OIDC, and WS‑Fed to secure access and improve identity governance.

The role emphasizes PoCs, tooling automation, and collaboration with risk/compliance teams to meet SOX ITGC requirements. A bachelor’s degree and 2–5+ years in IAM are expected; strong scripting and cloud security knowledge are a must.

Qualifications

• Bachelor's degree or equivalent in IT, CS, cybersecurity, engineering.
• 2–5+ years of enterprise IAM engineering experience.
• Experience with Okta and SSO/federation protocols.
• Knowledge of security policies, compliance and risk management.
• Strong communication and cross-team collaboration.
• Familiarity with GCP and core cloud security principles.
• Scripting skills (Python, PowerShell, Bash) for automation.
• Windows and Linux administration and troubleshooting.
• Experience with IAM tooling and incident response.

Responsibilities

• Deliver authentication and SSO solutions using Okta and Entra ID.
• Configure MFA and conditional access policies for apps and services.
• Integrate systems and federate identity across domains (SAML/OIDC/OAuth/WS-Fed).
• Support IAM infrastructure for high availability and IdP resiliency.
• Perform PoCs to evaluate new IAM technologies for enterprise use.
• Conduct technical reviews, quality inspections, and code reviews for IAM practices.
• Develop automated authentication workflows and lifecycle management processes.
• Provide advanced debugging and triage for IAM incidents and access issues.
• Collaborate with risk/compliance on SOX ITGC governance and controls.
• Design and maintain non-human identity governance and API access controls.

Skills

IAM engineering

Okta

SAML 2.0

OIDC

OAuth 2.0

PowerShell

Python

Terraform

Entra ID

GCP

Windows administration

Linux administration

Education

Bachelor's degree in IT/CS/Cybersecurity/Engineering

Tools

Okta

Terraform

Entra ID

Job description

McKesson is seeking an experienced IAM engineer to deliver enterprise authentication, MFA, and federation across cloud and on‑prem systems. You will work with Okta, Entra ID, SAML, OAuth, OIDC, and WS‑Fed to secure access and improve identity governance.

The role emphasizes PoCs, tooling automation, and collaboration with risk/compliance teams to meet SOX ITGC requirements. A bachelor’s degree and 2–5+ years in IAM are expected; strong scripting and cloud security knowledge are a must.