2 days ago
Richmond, VA, USAMid Level / Senior
H1B sponsor
Base Salary
$99k - $165k/yr
Responsibilities
- Deliver modern authentication and single sign-on solutions using Okta and Microsoft Entra ID.
- Configure, optimize, and enforce MFA and conditional access policies for internal and external applications.
- Integrate and federate identities across systems using SAML 2.0, OAuth 2.0, OpenID Connect, and WS-Fed.
- Engineer, scale, and maintain highly available authentication and IdP infrastructure.
- Conduct proofs of concept to evaluate identity and access management technologies.
- Perform technical reviews, quality inspections, and code reviews for IAM engineering practices and compliance.
- Develop and automate authentication workflows, joiner-mover-leaver lifecycle processes, and self-service provisioning.
- Debug and troubleshoot complex production IAM incidents and access issues.
- Support SOX, ITGC, risk, compliance, and regulatory requirements for identity lifecycle and access governance.
- Design and maintain non-human identity governance, secrets management, and API access controls across cloud and hybrid environments.
Requirements
- Bachelor’s degree in IT, Computer Science, Cybersecurity, Engineering, or a related field, or an equivalent combination of education and experience.
- 2–5+ years of enterprise IAM engineering experience.
- Hands-on experience with Okta or similar identity platforms and strong knowledge of SSO and federation protocols.
- Experience engineering, troubleshooting, and scaling resilient IdP infrastructure.
- Proficiency with PowerShell, Python, Terraform, and Infrastructure as Code.
- Foundation in Active Directory, Microsoft Entra ID, cloud security, and GCP.
- Basic scripting ability with Python, PowerShell, or Bash for automation and reporting.
- Working knowledge of Windows and Linux administration and troubleshooting.
- Familiarity with NIST, CIS, ISO 27001, security policies, compliance, and risk management.
- Strong troubleshooting, documentation, organization, communication, and stakeholder collaboration skills.
- Willingness to participate in on-call or after-hours incident support.
- Preferred certifications include CISSP, CISM, Okta Certified Professional or Administrator, and Microsoft Certified: Identity and Access Administrator Associate, or equivalent credentials.
- Advanced degree is preferred.
Benefits
- Base pay range is $98,900–$164,900 per year, with additional compensation such as annual bonus or long-term incentive opportunities potentially available.
- Competitive compensation and benefits package with pay determined by factors including performance, experience, skills, equity, market evaluations, and geography.
Tech Stack
Categories
About McKesson
McKesson is a public healthcare company that distributes pharmaceuticals and medical‑surgical supplies and provides pharmacy and provider technology and services. It sells to pharmacies, hospitals, health systems, and biopharma manufacturers through logistics, specialty and oncology support, pharmacy management, and healthcare IT/analytics offerings. Founded in 1833 and headquartered in Irving, Texas, it trades on the NYSE under the ticker MCK.