Software Engineer - Identity & Access Mgmt

Salary: $100,100 - 166,900 per year Requirements:

• We typically look for a degree or equivalent experience, along with 4+ years of relevant professional background.
• We want 4+ years of experience building and delivering production software as an individual contributor.
• We need deep hands-on experience with Okta and/or Auth0, including policies, applications, federation, and claims.
• We require practical experience implementing or integrating authentication and authorization with OIDC, OAuth 2.0, and/or SAML.
• We expect strong knowledge of secure engineering practices and common identity-related threats.
• We need experience with at least one of the following: JavaScript/TypeScript, Ruby, Python, or C#.
• We value the ability to work across engineering, product, and security teams and communicate technical choices clearly.
• We prefer experience with SMART on FHIR, SCIM, directory integrations, or identity lifecycle management.
• We welcome familiarity with RBAC/ABAC, claims-based authorization, or policy engines.
• Experience in regulated environments and supporting audits is a plus.
• Experience improving the reliability of critical authentication systems, including SLIs/SLOs and graceful degradation, is preferred.
• A degree is not required.
• We are unable to provide sponsorship for this role now or in the future.

• We design, build, and maintain authentication and authorization solutions using OIDC, OAuth 2.0, and SAML.
• We integrate applications and APIs with identity platforms such as Okta, Auth0, Ping, or Microsoft Entra ID.
• We implement SSO, MFA, federated authentication, session management, and secure token handling.
• We contribute to identity services such as login gateways, authorization middleware, claims transformation, and access policy enforcement.
• We support SMART on FHIR OAuth 2.0 use cases and broader unified authentication efforts.
• We apply industry security practices such as least privilege, secure defaults, defense in depth, and secure secret management.
• We partner with Security on threat modeling, risk assessments, and secure SDLC activities.
• We implement identity solutions aligned with NIST-based identity and access control principles.
• We build production-quality systems using JavaScript/TypeScript, Ruby, Python, or C#.
• We write clean, testable, maintainable code with strong engineering discipline, including CI/CD, code reviews, and automated testing.
• We create clear technical documentation for APIs, integrations, and operational support.
• We participate in on-call or operational support for critical identity services when needed.
• We work in a Kanban delivery model, managing flow and continuously improving quality and throughput.
• We collaborate with Product, Security, and stakeholders to define outcomes and balance tradeoffs.
• We bring an enterprise-first mindset, challenge designs constructively, and contribute new ideas.

• C#
• CI/CD
• Flow
• IAM
• Support
• JavaScript
• Kanban
• OAuth
• Python
• RBAC
• Ruby
• SAML
• Security
• TypeScript
• Web

More:

We are McKesson, an impact-driven Fortune 10 healthcare company that delivers insights, products, and services to make quality care more accessible and affordable. We are hiring a Software Engineer for our core IAM platform team within CoverMyMeds, focused on end-user identity, federated authentication, and authentication infrastructure for web applications. This is a hands-on individual contributor role in a product-oriented, Kanban-driven environment, with close partnership across Security, Product, and engineering teams. Priority is given to candidates in the Columbus, OH metropolitan area. We offer a competitive total rewards package, with a base pay range of $100,100 to $166,900, and may also provide bonus or long-term incentive opportunities. We are committed to equal opportunity employment and accommodations for candidates with disabilities.

last updated 33 week of 2026