21 hours ago
Base Salary
$131k - $218k/yr
Responsibilities
- Design, develop, test, deploy, and support secure authentication and authorization capabilities, including SSO, MFA, federation, provisioning, and identity lifecycle integrations.
- Lead migrations from legacy authentication and directory systems to Okta or comparable identity platforms.
- Build reusable, version-controlled identity infrastructure and platform configuration with Terraform and Infrastructure as Code.
- Develop secure services, APIs, and integrations supporting authentication, authorization, provisioning, and identity workflows.
- Implement OAuth 2.0, OpenID Connect, SAML, and SCIM-based identity integrations.
- Integrate identity configuration and security controls into CI/CD pipelines with automated testing and deployment practices.
- Diagnose complex production issues involving tokens, sessions, federation, provisioning, application integrations, and access policies.
- Contribute to identity architecture and roadmap planning, documentation, operational runbooks, and reusable engineering patterns.
- Partner with application engineering, architecture, product, security, risk, and compliance teams in a regulated healthcare environment.
- Mentor engineers on secure software development, identity patterns, Infrastructure as Code, and authentication architecture.
Requirements
- A degree or equivalent and typically 7+ years of relevant experience.
- At least 5 years of professional software engineering experience owning production applications, services, platforms, or distributed systems.
- At least 2 years of hands-on identity, authentication, authorization, or security engineering experience.
- Strong programming experience in Java, C#, Python, or a comparable object-oriented or backend language.
- Production experience integrating applications with Okta, Microsoft Entra ID, Auth0, Ping Identity, or a comparable modern identity provider.
- Production experience with OAuth 2.0, OpenID Connect, and SAML.
- Experience modernizing or migrating applications from LDAP, Active Directory, SiteMinder, or custom authentication services.
- Hands-on Terraform experience for provisioning and managing infrastructure or platform configuration as code, including reusable modules, source control, review, testing, and deployment practices.
- Experience building or supporting REST APIs, microservices, or distributed applications in security-sensitive production environments.
- Experience with modern CI/CD and automated software delivery practices.
- Experience implementing secure engineering practices involving authentication, authorization, secrets, sessions, or access controls.
- Preferred experience with deep Okta administration and integrations, Okta configuration through Terraform, SCIM provisioning, identity lifecycle automation, AWS, Azure, GCP, Docker, Kubernetes, relational or NoSQL persistence, Zero Trust, least privilege, policy-based access controls, and regulated industries.
- Preferred familiarity with HIPAA, SOC 2, or comparable security frameworks and an Okta or equivalent identity-platform certification.
Benefits
- Competitive compensation package and benefits are offered as part of McKesson’s Total Rewards.
- Additional annual bonus or long-term incentive opportunities may be offered.
- The base pay range for the position is $131,000-$218,300.
- McKesson offers equal employment opportunities and reasonable accommodation support for applicants with disabilities.
Categories
About McKesson
McKesson is a public healthcare company that distributes pharmaceuticals and medical‑surgical supplies and provides pharmacy and provider technology and services. It sells to pharmacies, hospitals, health systems, and biopharma manufacturers through logistics, specialty and oncology support, pharmacy management, and healthcare IT/analytics offerings. Founded in 1833 and headquartered in Irving, Texas, it trades on the NYSE under the ticker MCK.