Design, implement, and support enterprise IAM solutions with a strong focus on Okta
Lead the engineering and administration of Okta Identity Engine, Okta Workflows, and adaptive/risk-based access controls
Build and maintain secure authentication and federation integrations using SSO, SAML, OIDC, OAuth 2.0, SCIM, LDAP, and related standards
Engineer and improve identity lifecycle management processes, including provisioning, deprovisioning, joiner/mover/leaver workflows, and delegated administration
Integrate Okta with cloud, SaaS, and on-prem applications using APIs, provisioning connectors, and automation
Develop scripts and tooling using PowerShell, Python, JavaScript, or similar technologies to automate identity operations and improve platform efficiency
Partner with cross-functional teams to embed identity and access requirements into system and application design
Troubleshoot complex identity, access, authentication, and provisioning issues across enterprise environments
Recommend and implement improvements to IAM controls, architecture, and processes to reduce risk and enhance user experience
Create and maintain technical documentation, standards, and operational runbooks
Provide technical leadership and mentor junior team members
Basic/Required Skills
Typically requires 7+ years of experience in identity and access management, cybersecurity engineering, or related infrastructure/security roles
Hands-on experience engineering and supporting Okta in an enterprise environment
Hands-on experience with Okta Identity Engine, Okta Workflows, and adaptive access policies
Strong experience with SSO, federation, MFA, SAML, OIDC, OAuth 2.0, SCIM, LDAP, and directory services
Experience with identity lifecycle management, provisioning/deprovisioning, and access control models
Scripting/automation experience with PowerShell, Python, JavaScript, or similar
Preferred Skills/Experience
Experience with Universal Directory, delegated administration, API gateways, and service-to-service authentication/authorization
Bachelor’s degree or equivalent combination of education and experience
Experience contributing to IAM standards, architecture decisions, and platform roadmaps
Experience mentoring engineers and leading technical delivery
Okta certifications or other relevant IAM/security certifications
At McKesson, we care about the well-being of the patients and communities we serve, and that starts with caring for our people. That’s why we have a Total Rewards package that includes comprehensive benefits to support physical, mental, and financial well-being. Our Total Rewards offerings serve the different needs of our diverse employee population and ensure they are the healthiest versions of themselves.
As part of Total Rewards, we are proud to offer a competitive compensation package at McKesson. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy, and pay will always be compliant with any applicable regulations. In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered.
Our Base Pay Range for this position
€66,000 - €110,000
McKesson has become aware of online recruiting-related scams in which individuals who are not affiliated with or authorized by McKesson are using McKesson’s (or affiliated entities, like CoverMyMeds or RxCrossroads) name in fraudulent emails, job postings or social media messages. In light of these scams, please bear the following in mind:
McKesson Talent Advisors will never solicit money or credit card information in connection with a McKesson job application.
McKesson Talent Advisors do not communicate with candidates via online chatrooms or using email accounts such as Gmail or Hotmail. Note that McKesson does rely on a virtual assistant (Gia) for certain recruiting-related communications with candidates.
McKesson job postings are posted on our career site: careers.mckesson.com.
