Tomorrow’s health is… Tackling challengesno one else can.

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve – we care. What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow’s health today, we want to hear from you.

We are seeking a Senior Solutions Architect to join our Global Identity Architecture team to help deliver on our mission of providing superior identity services to our customers, providers, partners, and employees.   As the Senior Solution Architect, you will be part of a team that shapes the vision and strategy for Global Identity at McKesson. Successful candidates will have extensive experience in Customer or Enterprise Identity and Access Management and a proven ability to influence and drive change.  

Responsibilities include: 

• Provides technical guidance to drive and shape the Global Identity Services architecture.

• Assists in the development of strategic roadmaps, technical blueprints, standards, and reference architectures in support of the Global Identity Services program.

• Consults with business stakeholders and other architects to understand core business processes and business priorities and provides recommendations on IAM (Identity and Access Management) solutions.

• Assists with technical evaluations of IAM products including proof of concepts to determine business value of candidate solutions.

• Collaborates cross-functionally with other technology teams and Information Security and Risk Organization

• Participates in Request for Proposal (RFP) and vendor selection process in the IAM space.

• Keeps abreast of industry trends and informs the team of evolving IAM standards and landscape. 
  

Minimum Requirements:

• 6+ years of experience in developing technical architectures with minimum of 4 years focused on IAM architecture.

• Bachelor’s degree (Computer Science or related IT field), or equivalent experience

Critical Skills:

• Strong understanding of the end-to-end Identity lifecycle management.

• Hands on experience with authentication and authorization protocols such as OIDC, SAML, OAuth2, FIDO, U2F, WebAuthn, SCIM, XACML, LDAP, RADIUS, Kerberos.

• Experience in architecting robust, scalable, and secure solutions that meet customer’s IAM needs.

• Experience with Multi-factor authentication capabilities including token-based, biometrics, certificates, and adaptive authentication.

• Experience with IDaaS providers such as Okta, Azure AD, Ping Identity, or Google Cloud Identity.

Additional Knowledge & Skills:

• Experience with Privileged access management (PAM) architectures and capabilities (least privileged, session management, vaulting, and endpoint privileged management). Experience with CyberArk or Azure PIM are a plus.

• Experience with cloud architectures particularly Azure and GCP native IAM controls.

• Experience with Identity Governance processes and solutions such as Sailpoint or Saviynt a plus.

• Experience with User Behavior Analytics.

• Experience with WorkDay, SAP, or SalesForce.

• Experience with O365, Active Directory and ADFS.

• Experience with MDM capabilities such as InTune, Jamf, or Airwatch.

• Experience with API Gateway and microservices architectures.

• Knowledge of Applied Cryptography and PKI.

• Experience with Python, PowerShell, Java, Java Script, JSON, REST, Scripting, HTML

• Understanding of trends and regulations to ensure effectiveness and compliance with all regulations and frameworks (NIST, HIPPA-HITECH, HITRUST, PCI, GDPR).

• Excellent written and verbal communication and organizational skills.

• Strong interpersonal and communications skills to build/ maintain ongoing business relationships.

Certifications: 

• CISSP or SANS GIAC a plus

At McKesson, we care about the well-being of the patients and communities we serve, and that starts with caring for our people. That’s why we have a Total Rewards package that includes comprehensive benefits to supportphysical, mental, and financial well-being. Our Total Rewards offerings serve the different needs of our diverse employee population and ensure they are the healthiest versions of themselves. For more information regarding benefits at McKesson, pleaseclick here.

As part of Total Rewards, we are proud to offer a competitive compensation package at McKesson. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered.

Our Base Pay Range for this position

McKesson is an Equal Opportunity/Affirmative Action employer.

All qualified applicants will receive consideration for employment without regard to race, color, religion, creed, sex, sexual orientation, gender identity, national origin, disability, or protected Veteran status.Qualified applicants will not be disqualified from consideration for employment based upon criminal history.

McKesson is committed to being an Equal Employment Opportunity Employer and offers opportunities to all job seekers including job seekers with disabilities. If you need a reasonable accommodation to assist with your job search or application for employment, please contact us by sending an email to Disability_Accommodation@McKesson.com. Resumes or CVs submitted to this email box will not be accepted.

Current employees must apply through the internal career site.

Join us at McKesson!