Lead IGA Solution Architect

Requirements:

• 10+ years of experience in cybersecurity, identity and access management (IAM), identity governance (IGA), or enterprise security architecture.
• 7+ years of experience with SailPoint ISC or IIQ.
• 5+ years of experience supporting cloud platforms such as Azure, AWS, and Google Cloud.
• 3+ years of experience developing enterprise architecture roadmaps and target-state identity security strategies.
• Bachelors degree in Computer Science, Cybersecurity, Information Systems, or a related field, or equivalent experience.
• Experience architecting and implementing enterprise Identity Governance and Administration (IGA) platforms.
• Experience designing integrations with SCIM, REST APIs, LDAP, Active Directory, HR systems, and cloud applications.
• Ability to influence senior technical and business stakeholders in large enterprise environments.
• Knowledge of identity security automation and workflow orchestration.
• Experience establishing identity governance operating models and architecture standards.
• Familiarity with DevSecOps, security architecture governance, and cloud-native security controls.
• Professional certifications such as CISSP, SailPoint, or related credentials are preferred.
• Experience in healthcare, pharmaceuticals, or other highly regulated industries is preferred.
• Experience mentoring architects and developers and leading cross-functional transformation programs is preferred.
• Knowledge of Zero Trust architecture, Privileged Access Management (PAM), and regulatory frameworks such as SOX and HIPAA is preferred.
• Ability to participate in virtual and in-person meetings and collaborate effectively.
• Ability to remain stationary for extended periods while using standard office equipment.

Responsibilities:

• Architect and implement enterprise IGA solutions for workforce, contractor, and third-party identities.
• Design identity lifecycle processes for joiners, movers, and leavers, including provisioning, deprovisioning, and access requests.
• Develop governance frameworks for role-based access control (RBAC), access certifications, segregation of duties (SoD), and policy enforcement.
• Design, build, configure, test, and deploy SailPoint ISC integrations using REST APIs, SCIM, JDBC, LDAP, Active Directory, and custom connector frameworks.
• Engineer application onboarding solutions, including account aggregation, entitlement management, access profiles, roles, and provisioning policies.
• Create automated provisioning and deprovisioning solutions for SaaS, on-premises, hybrid, and cloud applications.
• Troubleshoot complex identity synchronization, correlation, aggregation, certification, and provisioning issues.
• Work with business, compliance, audit, and technology teams to translate business needs into identity security controls and governance models.
• Lead enterprise identity transformation initiatives, advancing adoption, modernization, and continuous improvement of identity governance capabilities.
• Provide architecture leadership for Zero Trust, PAM, and regulatory compliance requirements.

Technologies:

• AWS
• Active Directory
• Architect
• Azure
• Cloud
• DevSecOps
• IAM
• LDAP
• REST
• RBAC
• Security
• Support

More

We are McKesson, an impact-driven Fortune 10 company working across healthcare to make quality care more accessible and affordable. We foster a culture focused on growth, well-being, and meaningful contributions. In this senior architecture role, you will shape enterprise identity security across a complex, highly regulated environment and collaborate with cybersecurity, infrastructure, application, HR, compliance, audit, and business teams. The position may be remote, hybrid, or office-based according to organizational needs, with limited travel possible. We offer a competitive compensation package, potentially including an annual bonus or long-term incentives; the base pay range is $122,100–$162,800, with compensation determined by factors such as experience, skills, performance, and location. We are an equal opportunity employer.

last updated 43 week of 2026