> Markdown version of [/jobs/ext/4295218-cybersecurity-iam-engineer](https://www.wearedevelopers.com/jobs/ext/4295218-cybersecurity-iam-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cybersecurity IAM Engineer

- **Company:** McKesson
- **Location:** Richmond, VA, United States
- **Experience:** Experienced
- **Salary:** $98,900.0 - $164,900.0
- **Contract:** Permanent contract
- **Skills:** Active Directory, Application Programming Interfaces (APIs), Bash Shell, Cloud Computing Security, Code Review, Cyber Security, Software Debugging, Multi-Factor Authentication, Identity and Access Management, Python (Programming Language), Key Management, Linux System Administration, OAuth, OpenID, Windows PowerShell, Openid Connect, Azure Active Directory, Security Assertion Markup Language (SAML), Single Sign-On, Data Logging, Scripting, IT General Controls (ITGC), Okta, System Availability, Information Technology, Terraform
- **Published:** October 31, 2026
- **Apply:** https://mckesson.wd3.myworkdayjobs.com/en-US/External_Careers/job/USA-VA-Richmond/Cybersecurity-IAM-Engineer_JR0156197

## About the Role

* Bachelor's degree in IT, Computer Science, Cybersecurity, Engineering, or a related field; or equivalent combination of education and experience., * 2-5+ years of enterprise IAM engineering experience.
 * Proven ability to follow procedures, troubleshoot issues, and document work via tickets and runbooks.
 * Understanding of security policies, compliance, and risk management.
 * Strong communication skills with the ability to escalate issues and collaborate across teams.
 * Adaptable self-starter committed to integrity and continuous learning.
 * Familiarity with GCP and core cloud security principles (IAM, networking, logging, encryption).
 * Basic scripting skills (Python, PowerShell, Bash) for task automation and reporting.
 * Working knowledge of Windows and Linux administration and troubleshooting.
 * Familiarity with security frameworks (NIST, CIS, ISO 27001) and compliance standards.
 * Strong organizational skills to manage and prioritize multiple tasks.
 * Willingness to participate in on-call or after-hours incident support.
 * Hands-on experience with Okta, or similar identity platforms.
 * Proficiency in SSO and federation protocols (SAML 2.0, OIDC, OAuth 2.0, WS-Fed).
 * Experience engineering, troubleshooting, and scaling resilient IdP infrastructure.
 * Proficiency in scripting/automation (PowerShell, Python, Terraform) and Infrastructure as Code.
 * Strong foundation in enterprise directory services (Active Directory, Entra ID) and cloud security.
 * Strong analytical and troubleshooting skills for complex identity issue triage.
 * Effective interpersonal and communication skills across technical and business stakeholders.

Education Requirements

 * Bachelors degree in computer science, information security/assurance, engineering, or a related field; advanced degree preferred or equivalent experience.

Certification Requirements

 * Preferred certifications: CISSP, CISM, Okta Certified Professional/Administrator, Microsoft Certified: Identity and Access Administrator Associate, or equivalent identity and security credentials.

## Description

* Deliver modern authentication and single sign-on (SSO) solutions leveraging identity platforms such as Okta and Microsoft Entra ID.
 * Configure, optimize, and enforce Multi-Factor Authentication (MFA) and conditional access policies for internal and external application systems.
 * Collaborate with application and platform teams to integrate systems and federate identity across domains using SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and WS-Fed protocols.
 * Support the engineering, scaling, and high availability of authentication infrastructure to ensure high IdP resiliency across platforms.
 * Perform Proofs of Concepts (PoCs) to evaluate and recommend novel identity and access management technologies aligned with enterprise requirements.
 * Perform technical reviews, quality inspections, and code reviews to maintain consistent application of IAM engineering practices and compliance standards.
 * Develop and automate authentication workflows, lifecycle management (joiner-mover-leaver) processes, and self-service provisioning.
 * Provide advanced debugging, troubleshooting, and issue triaging for complex production IAM incidents and access issues.
 * Partner with risk and compliance stakeholders to support SOX, ITGC, and regulatory requirements relating to identity lifecycle and access governance.
 * Design and maintain non-human identity governance, secrets management, and API access controls across cloud and hybrid environments.