McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve – we care.

What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow’s health today, we want to hear from you.

About the Role

McKesson is seeking a Sr. Associate, IAM Engineer - Identity Governance to support the security and governance of user access across enterprise systems and applications. This role will help implement and maintain identity governance processes that ensure the right individuals have the right access at the right time while supporting McKesson's security, compliance, and Zero Trust objectives.

Working closely with cybersecurity, infrastructure, application, and business teams, you will assist with access governance activities, troubleshoot access-related issues, support automation efforts, and help improve identity security processes. This role is ideal for a cybersecurity professional with strong technical fundamentals, analytical thinking, and a desire to develop deep expertise in Identity and Access Management (IAM) and Identity Governance (IGA).

What You’ll Do

• Support the administration and operation of Identity Governance and Access Management solutions.
• Assist with user access provisioning, deprovisioning, role changes, and access reviews.
• Investigate and resolve access-related issues, workflow failures, and data discrepancies.
• Support access certification campaigns and governance activities by validating data and tracking remediation efforts.
• Participate in onboarding applications to identity governance platforms and documenting access requirements.
• Analyze identity and access data to identify risks, inconsistencies, or opportunities for improvement.
• Develop and maintain technical documentation, procedures, and operational support materials.
• Assist with audit and compliance activities by preparing evidence and supporting control validation efforts.
• Use scripting, reporting, or automation tools to improve operational efficiency and data quality.
• Collaborate with technical and business teams to resolve issues and implement process improvements.
• Participate in cybersecurity and identity-related projects, testing activities, and platform enhancements.
• Continuously learn and develop expertise in identity security technologies and best practices.

Basic Requirements

• 2+ years of relevant professional experience in identity and access management, identity governance, cybersecurity, IT operations, application support, or a related technology role.
• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Engineering, or equivalent experience.
• Foundational understanding of cybersecurity principles including authentication, authorization, least privilege, access controls, and risk management.
• Experience troubleshooting technical issues and analyzing system behavior, logs, reports, or operational data.
• Ability to follow documented processes, identify root causes, and execute solutions within established procedures.
• Familiarity with enterprise technology environments including operating systems, directories, cloud platforms, applications, or security tools.
• Basic experience with scripting, automation, reporting, or data analysis using tools such as PowerShell, Python, SQL, Excel, or similar technologies.
• Strong communication, collaboration, and problem-solving skills.

Preferred Skills/Experience

• Exposure to Identity and Access Management (IAM) or Identity Governance (IGA) concepts.
• Experience testing Identity Governance & Administration (IGA) solutions, including access requests, provisioning/deprovisioning, and user lifecycle (Joiner, Mover, Leaver) processes.
• Proficient in functional, regression, integration, and API testing with strong defect management and root cause analysis skills.
• Experience supporting compliance and audit requirements through User Access Reviews (UARs), RBAC testing, test evidence creation, and control validation.
• Working knowledge of SailPoint, Active Directory, Entra ID (Azure AD), and Okta, with experience validating identity integrations and access controls
• Experience working with technical data, reports, dashboards, logs, or automation tools.
• Understanding of Zero Trust, least privilege, segregation of duties, or related security concepts.
• Security certifications such as CompTIA Security+, Microsoft Security certifications, AWS, Azure, or equivalent certifications.
• Demonstrated curiosity and willingness to learn new technologies and security domains.

At McKesson, we care about the well-being of the patients and communities we serve, and that starts with caring for our people. That’s why we have a Total Rewards package that includes comprehensive benefits to support physical, mental, and financial well-being. Our Total Rewards offerings serve the different needs of our diverse employee population and ensure they are the healthiest versions of themselves.

As part of Total Rewards, we are proud to offer a competitive compensation package at McKesson. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy, and pay will always be compliant with any applicable regulations.  In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered. 

Our Base Pay Range for this position

McKesson has become aware of online recruiting-related scams in which individuals who are not affiliated with or authorized by McKesson are using McKesson’s (or affiliated entities, like CoverMyMeds or RxCrossroads) name in fraudulent emails, job postings or social media messages. In light of these scams, please bear the following in mind:

McKesson Talent Advisors will never solicit money or credit card information in connection with a McKesson job application.

McKesson Talent Advisors do not communicate with candidates via online chatrooms or using email accounts such as Gmail or Hotmail. Note that McKesson does rely on a virtual assistant (Gia) for certain recruiting-related communications with candidates.

McKesson job postings are posted on our career site: careers.mckesson.com.