IAM Solutions Engineer

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve - we care. What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow's health today, we want to hear from you.

Job Title: Sr. Identity and Access Management (IAM) Solutions Engineer - PAM / IGA / OKTA / AD

Work Location: Irving, TX is the primary location / Atlanta, GA / Richmond, VA

Position Description

The Sr. Identity and Access Management (IAM) Solutions Engineer will interface with business, application, and system stakeholders and identify Identity and Access Management (IAM) needs. They will work across different teams, including within Enterprise Access Management (EAM), to ensure the adoption of the IAM enterprise solutions. They will also work across the teams on alternatives that meet the policies and standards when there are exceptions to the enterprise solutions. This role will report directly to the Sr. Director, Information Security in EAM.

Key Responsibilities include:

• Lead the collaboration and discussion with business, application, and system stakeholders on meeting the Identity and Access Management (IAM) policies and standards through adopting enterprise IAM solutions or identifying alternatives on exceptions.
• Plan technical IAM solutions and alternatives to meet business requirements in adherence with Mckesson standards, processes and best practices
• Partner with Leadership in implementing IAM processes per the evolving needs of the team and the solutions
• Collaborate with business and technical partners to identify and scope the opportunities, quantify costs, outline potential value and ROI, identify risks, benefits and constraints.
• Socialize and collaborate on IAM strategy with senior leadership and executives
• Perform quality inspections and walkthroughs throughout the System or Software Development Life Cycle (SDLC), including requirements review, architecture review, design review, code review and security review to ensure compliance with McKesson standards.
• Ensure compliance with audit requirements by proactively educating the teams on compliance requirements and integrating compliance requirements in their applications and systems.
• Mentor and guide other team members during all phases of the SDLC.
• Identify opportunities to update the IAM policies and standards to align with evolving security, industry and business requirements.
• Perform Proofs of Concepts (PoCs) to assess and identify the technologies per the needs of the organization.
• Develop documentation templates and direct and enforce the development of documentation throughout the development lifecycle of the solution.
• Seek opportunities to modify and enhance standards per the needs of the department
• Provide recommendation to Senior Management on selection of technologies and strategic technical direction for the department
• Develop multi-year next generation CAM strategy and roadmap
• Abide by Mckesson's security policies and practices

Minimum Requirements: 6 years in IT and Information Security, including 3 years Identity and Access Management experience.

Must have critical skills any of the following:

For Okta - IAM solutioning:

In-depth knowledge and experience in two or more of the following Identity and Access Management (IAM) areas:

• Identity Management (including human and non-human identities) and Directory Services (Active Directory)
• Authentication Management (Single Sign-On, OAuth, SAML, etc.) using Okta or similar solutions
• Identity Governance Administration (including access controls through roles and other attributes, and access reviews)
• Privileged Access Management (including segregation of duties)
• Digital Certificates or Public Key Infrastructure

Or

For IGA - IAM Solutioning:

In-depth knowledge and experience in:

• Identity Governance Administration (IGA) (Role based access, account lifecycle management and user access attestations).
• Experience deploying, management and/or support IGA applications such as Saviynt or SailPoint.

Or

For PAM - IAM Solutioning:

• Proven experience as a Senior Privileged Access Engineer or Architect or similar role with minimum 4 years of experience
• Advanced knowledge of Active Directory, Azure Active Directory, Lightweight Directory Access Protocol, Active Directory Federation Services, and other directory systems.
• Expert knowledge of Windows Server, Linux, Unix, and AS/400 operating systems and Active Directory/Azure Active Directory integration.
• Advanced knowledge of managing and supporting group policies objects, DNS, DHCP, active directory topology and replication as well as Azure Conditional Access Policies
• Expert knowledge of PowerShell scripting with experience of implementing automation for configuration management and reduce need for manual effort.
• Expert knowledge of securing Cloud secrets including but not limited to industry standard key vaults in Azure, Google Cloud and AWS.
• Expert working knowledge of CI/CD pipelines, Kubernetes, and development environments such as Springboot to facilitate integrations with PAM tools.

• Ability to quickly learn other IAM areas needed for the role.
• Ability to communicate and interact with senior stakeholders in layperson terms as well as with technical stakeholders.
• Ability to lead and influence different levels in the organization to ensure the adherence of the IAM-related policies and standards through implementing enterprise IAM solutions or finding alternatives.
• Experience working on multiple projects with matrix-based team members with the appropriate level of detail.
• Ability to work with minimal supervision and able to prioritize while handling multiple responsibilities.a

At McKesson, we care about the well-being of the patients and communities we serve, and that starts with caring for our people. That's why we have a Total Rewards package that includes comprehensive benefits to supportphysical, mental, and financial well-being. Our Total Rewards offerings serve the different needs of our diverse employee population and ensure they are the healthiest versions of themselves. For more information regarding benefits at McKesson, please

As part of Total Rewards, we are proud to offer a competitive compensation package at McKesson. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered.

McKesson is an Equal Opportunity/Affirmative Action employer.

All qualified applicants will receive consideration for employment without regard to race, color, religion, creed, sex, sexual orientation, gender identity, national origin, disability, or protected Veteran status.Qualified applicants will not be disqualified from consideration for employment based upon criminal history.

McKesson is committed to being an Equal Employment Opportunity Employer and offers opportunities to all job seekers including job seekers with disabilities. If you need a reasonable accommodation to assist with your job search or application for employment, please contact us by sending an email to . Resumes or CVs submitted to this email box will not be accepted.

Current employees must apply through the internal career site.

Join us at McKesson!