MTA - Lead IAM Engineer

The Lead Information Security Analyst will provide subject matter expertise and lead the analysis, design, and implementation for hybrid on-prem and cloud Active Directory environments and Azure Active Directory/Entra ID tenants. This role includes leading the engagement and collaboration with business and technical partners to integrate systems and applications with centralized authentication such as Active Directory or Azure Active Directory/Entra ID. Responsibilities include providing subject matter expertise and leading the analysis, design, and implementation for hybrid on-prem and cloud Active Directory environments and Azure Active Directory/Entra ID tenants; leading engagement and collaboration with business and technical partners to integrate systems and applications with centralized authentication; providing subject matter knowledge and expertise on Active Directory, Azure Active Directory/Entra ID, and Okta Active Directory synchronization; leading new product comparison, vetting, and selection process; leading Active Directory and Entra ID disaster recovery drills; enhancing authentication platforms to protect from cyber threats and ensure operational stability; collaborating with global cross-functional teams to ensure stability, scalability, and security of identity environments; leading response and resolution of complex incidents; leading infrastructure reviews and documentation; analyzing current authentication services for improvements; leading system and process hygiene assessments and automation; researching innovations in IT security and IAM technologies; and providing on-call support as needed. Minimum requirements include proven experience as a Lead Active Directory/Entra ID Engineer or similar role with at least 10 years of experience, ability to prioritize and execute tasks, strong influencing skills, and experience leading collaborative service management solutions. Critical skills include expert-level understanding of Active Directory, Azure Active Directory/Entra ID, LDAP, ADFS, Microsoft Azure, PowerShell scripting, Single-Sign On, authentication protocols, security best practices, directory synchronization tools, and excellent problem-solving and communication skills. Education requires a degree or equivalent with typically 10+ years of relevant experience, less if holding advanced degrees. McKesson offers a competitive compensation package including base pay, bonuses, and long-term incentives.