Software Engineer, Systems Engineer, Cybersecurity

About the Role

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well‑being of you and those we serve - we care.

The Senior IAM Engineer will provide subject matter expertise and support the analysis, design, and implementation for hybrid on‑prem and cloud Active Directory environments and Azure Active Directory/Entra . This role includes engaging and collaborating with business and technical partners to integrate systems and applications with centralized authentication such as Active Directory or Azure Active Directory/Entra .

• Provide deep subject matter expertise and support the analysis, design, and implementation for hybrid on‑prem and cloud Active Directory environments and Azure Active Directory/Entra .
• Engage and collaborate with business and technical partners to integrate systems and applications with centralized authentication such as Active Directory or Azure Active Directory/Entra .
• Provide deep subject matter knowledge and expertise on Active Directory, Azure Active Directory/Entra , and Okta Active Directory synchronization.
• Support new product comparison, vetting, and selection process to ensure technology is relevant and meets business requirements.
• Drive Active Directory and Entra  recovery drills, process improvements, and documentation efforts.
• Continually enhance authentication platforms, ensuring systems are protected from new and evolving cyber threats and systems are operationally stable.
• Collaborate closely with global cross‑functional teams to ensure the stability, scalability, and security of the Active Directory and Azure Active Directory/Entra  and Okta. Participate in discussions on all aspects of identity and access management.
• Respond to and resolve complex, high‑severity incidents.
• Lead regular reviews of deployed infrastructure, develop detailed architecture, and create and update new technical documentation and Standard Operating Procedures (SOP).
• Analyze the current authentication services platforms to identify both technical and operational opportunities for enhancements and develop continuous improvement action plans.
• Lead regular assessment of systems and process hygiene and identify and implement automation.
• Actively research and implement new innovations in IT security as well as IAM technologies and services, striving to ensure McKesson continues to deliver best practices and standards.
• Provide on‑call support as needed for operational continuity of Identity platforms. (1 week rotation for on‑call)

• Proven experience as an Active Directory/Entra  or similar role with a minimum of 7 years of experience.
• Proven ability to effectively prioritize and execute tasks with competing priorities; strong influencing skills to work with various service owners.
• Demonstrated experience effectively leading and managing collaborative, service‑management solutions across disparate functional teams.

• Advanced understanding of Active Directory, Azure Active Directory/Entra , Lightweight Directory Access Protocol, Active Directory Federation Services, and other centralized identity stores.
• Advanced understanding of Microsoft Azure and familiarity with IAM permissions on management groups, subscriptions, and resources.
• Advanced knowledge of Azure Active Directory/Entra  such as Conditional Access Policies, Privileged Identity Manager, and Application Registrations.
• Advanced understanding of Active Directory attributes, LDAP queries, Power Shell scripting, Active Directory Federation Services (ADFS), Group Policy Object (GPO) analysis, configuration, and item‑level targeting, active directory replication, Active Directory backup and restore, as well as certificate installation.
• Advanced understanding of implementing security on Active Directory and Entra  hardening those platforms.
• Advanced understanding of Active Directory and Entra p and restore processes and experience of performing disaster recovery exercises.
• Adva…