Sr. IAM Engineer

Overview

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve – we care.

We are seeking a Senior Identity and Access Management Engineer to join our Privileged Access and Secrets Management (PAM/PASM) team. This role requires deep technical expertise and hands-on engineering experience to design, build, and support enterprise-class PAM/PASM solutions.

Key Responsibilities

• Design and implement end-to-end privileged access solutions for enterprise identity platforms with a focus on security, scalability, and automation.
• Engineer, deploy, and support the CyberArk Privileged Access Management Suite, including but not limited to:
  • Enterprise Password Vault (OS, DB privileged accounts)
  • Secrets Manager Credential Provider / Central Credential Provider (App2App secrets, encryption keys, Dynamic Access Providers)
  • Privileged Session Manager (Windows and Linux)
  • Password Vault Web Access (PVWA) and Disaster Recovery Vault
• Troubleshoot and resolve complex issues in production environments with minimal supervision.
• Work collaboratively with global teams to perform system and application configuration, integration, upgrades, and lifecycle management.
• Lead and coordinate integration services, product updates, and change management.
• Identify, design, and implement opportunities for process automation to reduce manual engineering effort.
• Drive improvements in operational processes, procedures, and documentation.
• Conduct vendor/product research to recommend solutions aligned with business priorities.
• Monitor and maintain system health, performance, and 24/7 uptime requirements, including participation in on-call support rotations.
• Support privileged access reviews and respond to audit/compliance requests.
• Stay current on IAM security trends, emerging technologies, and best practices.

Basic / Required Skills

• Equivalent of 7+ years of industry experience (with 3+ years hands-on CyberArk engineering).
• Deep, hands-on CyberArk engineering experience (minimum 3+ years) with proven ability to design, deploy, and support CyberArk components in production.
• In-depth knowledge of Vault architecture, configuration, and recovery processes—ability to troubleshoot and remediate issues independently.
• Expertise with CyberArk Core Vault is mandatory; experience with broader CyberArk suite strongly preferred.

Preferred Skills

• Strong experience managing Windows and Linux server infrastructure (virtual and/or physical) at the OS level.
• Solid understanding of Windows Active Directory, Group Policies, and identity security controls.
• Experience working with multiple platforms: Windows, Linux, Unix, AS400, Oracle, AIX.
• Preferably with advanced scripting skills (PowerShell, PACLI, REST API) for automation and integration.
• Proven experience designing and delivering automated solutions for infrastructure deployment, configuration, and maintenance.
• Strong problem-solving and analytical skills, with the ability to resolve complex technical issues under pressure.
• Self-directed, highly organized, and detail-oriented with excellent time management skills.
• Ability to work effectively with teams across time zones, with work hours aligned to US Eastern time zone.

Education

Degree or equivalent experience

Physical Requirements

General Office Demands

Compensation

As part of Total Rewards, McKesson offers a competitive compensation package determined by performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy and pay will be compliant with applicable regulations. In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered.

Our Base Pay Range for this position

€67,500 - €112,500

Seniority level

• Mid-Senior level

Employment type

• Full-time

Job function

• Engineering and Information Technology

Industries

• Hospitals and Health Care

#J-18808-Ljbffr

---