We are seeking a
Sr. Associate Software Engineer with software development experience and an interest in
Identity and Access Management (IAM) to help build, integrate, and maintain secure authentication and authorization capabilities across CoverMyMeds' platforms.
This role is part of a core IAM platform team responsible for end-user identity, federated authentication, and authentication infrastructure supporting web applications. You will partner with experienced engineers and collaborate with Security, Product, and other engineering teams to deliver reliable identity solutions.
This is a hands-on individual contributor role in a product-oriented, Kanban-driven environment. The ideal candidate has mastered foundational software engineering practices, can complete moderately complex assignments with guidance, and is interested in continuing to develop deeper IAM expertise.
What You'll Do
Identity Engineering and Integrations
- Develop, test, and maintain authentication and authorization capabilities using technologies such as OIDC, OAuth 2.0, and SAML.
- Assist with integrating applications and APIs with identity platforms such as Okta, Auth0, Ping Identity, or Microsoft Entra ID.
- Implement and support capabilities involving SSO, MFA, federated authentication, session management, and secure token handling.
- Contribute to identity services such as login gateways, authorization middleware, claims transformation, and access policy enforcement.
- Support SMART on FHIR OAuth 2.0 use cases and broader unified authentication initiatives.
- Troubleshoot moderately complex authentication, authorization, and application integration issues.
- Follow established identity architecture, engineering standards, and implementation patterns.
Security and Standards
- Apply secure engineering practices, including least privilege, secure defaults, defense in depth, and appropriate handling of secrets and credentials.
- Participate in threat modeling, risk reviews, and secure software development lifecycle activities with guidance from Security and senior engineers.
- Help implement identity solutions aligned with established identity and access control principles.
- Identify potential security or reliability concerns and escalate complex risks to the appropriate technical or security partners.
- Follow organizational security, privacy, compliance, and access-control requirements.
Software Development and Delivery
- Build and maintain production software using one or more languages such as JavaScript, TypeScript, Ruby, Python, or C#.
- Write clean, testable, and maintainable code using established engineering standards.
- Participate in code reviews and incorporate feedback from peers and senior engineers.
- Create and maintain unit, integration, and automated tests.
- Support CI/CD practices and the safe delivery of application and identity-service updates.
- Diagnose and resolve software defects and moderately complex production issues.
- Update existing applications and services to improve functionality, address technical issues, and incorporate new features.
- Create clear technical documentation for APIs, integrations, implementation decisions, and operational support.
- Participate in on-call or operational support for critical identity services as needed, with appropriate team support and escalation paths.
Collaboration and Ways of Working
- Work within a Kanban delivery model by managing assigned work, communicating progress, and contributing to improvements in quality and delivery flow.
- Collaborate with Product, Security, QA, and engineering partners to clarify requirements and deliver software that meets user and business needs.
- Participate in technical discussions and contribute ideas, questions, and implementation recommendations.
- Communicate technical decisions, risks, dependencies, and challenges clearly.
- Seek guidance when addressing unfamiliar, highly complex, or high-risk technical issues.
- Continue developing technical knowledge through feedback, mentorship, documentation, and hands-on experience.
Priority will be given to candidates who reside in the Columbus, Ohio metropolitan area.
We are unable to provide sponsorship for this role now or in the future.
Minimum Qualifications
- Degree or equivalent combination of education and relevant experience.
- Typically requires 2 or more years of relevant software development experience.
Education
- A degree is not required.
- Equivalent professional experience, technical training, internships, apprenticeships, or other demonstrated software engineering experience will be considered.
Critical Skills
- At least 2 years of experience developing, testing, or supporting production software.
- Practical experience with an identity platform such as Okta, Auth0, Ping Identity, Microsoft Entra ID, or a comparable technology.
- Experience implementing, integrating, or supporting authentication and authorization using at least one standard or protocol such as OIDC, OAuth 2.0, or SAML.
- Experience developing software in at least one of the following languages:
- JavaScript or TypeScript
- Ruby
- Python
- C#
- Understanding of foundational secure engineering practices and common authentication or authorization risks.
- Experience writing, testing, debugging, and maintaining application code.
- Ability to troubleshoot moderately complex technical issues using established practices and available documentation.
- Ability to collaborate with engineering, Product, and Security partners.
- Ability to communicate technical information clearly and document completed work.
- Ability to work effectively with moderate guidance while continuing to build technical expertise.
We are proud to offer a competitive compensation package at McKesson as part of our Total Rewards. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy, and pay will always be compliant with any applicable regulations. In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered. For more information regarding benefits at McKesson, please click here.
Our Base Pay Range for this position$86,600 - $144,400
McKesson has become aware of online recruiting-related scams in which individuals who are not affiliated with or authorized by McKesson are using McKesson's (or affiliated entities, like CoverMyMeds or RxCrossroads) name in fraudulent emails, job postings or social media messages. In light of these scams, please bear the following in mind:
McKesson Talent Advisors will never solicit money or credit card information in connection with a McKesson job application.
McKesson Talent Advisors do not communicate with candidates via online chatrooms or using email accounts such as Gmail or Hotmail. Note that McKesson does rely on a virtual assistant (Gia) for certain recruiting-related communications with candidates.
McKesson job postings are posted on our career site: careers.mckesson.com.
