Lead IGA Solution Architect

Salary: $122,100 - 162,800 per year Requirements: 10+ years of experience in cybersecurity, identity and access management (IAM), identity governance (IGA), or enterprise security architecture. 7+ years of experience with SailPoint ISC or IIQ. 5+ years of experience supporting cloud platforms such as Azure, AWS, and Google Cloud. 3+ years of experience developing enterprise architecture roadmaps and target-state identity security strategies. Bachelors degree in Computer Science, Cybersecurity, Information Systems, or a related field, or equivalent experience. Experience architecting and implementing enterprise Identity Governance and Administration (IGA) platforms. Experience designing integrations with SCIM, REST APIs, LDAP, Active Directory, HR systems, and cloud applications. Ability to influence senior technical and business stakeholders in large enterprise environments. Knowledge of identity security automation and workflow orchestration. Experience establishing identity governance operating models and architecture standards. Familiarity with DevSecOps, security architecture governance, and cloud-native security controls. Professional certifications such as CISSP, SailPoint, or related credentials are preferred. Experience in healthcare, pharmaceuticals, or other highly regulated industries is preferred. Experience mentoring architects and developers and leading cross-functional transformation programs is preferred. Knowledge of Zero Trust architecture, Privileged Access Management (PAM), and regulatory frameworks such as SOX and HIPAA is preferred. Ability to participate in virtual and in-person meetings and collaborate effectively. Ability to remain stationary for extended periods while using standard office equipment. Responsibilities: Architect and implement enterprise IGA solutions for workforce, contractor, and third-party identities. Design identity lifecycle processes for joiners, movers, and leavers, including provisioning, deprovisioning, and access requests. Develop governance frameworks for role-based access control (RBAC), access certifications, segregation of duties (SoD), and policy enforcement. Design, build, configure, test, and deploy SailPoint ISC integrations using REST APIs, SCIM, JDBC, LDAP, Active Directory, and custom connector frameworks. Engineer application onboarding solutions, including account aggregation, entitlement management, access profiles, roles, and provisioning policies. Create automated provisioning and deprovisioning solutions for SaaS, on-premises, hybrid, and cloud applications. Troubleshoot complex identity synchronization, correlation, aggregation, certification, and provisioning issues. Work with business, compliance, audit, and technology teams to translate business needs into identity security controls and governance models. Lead enterprise identity transformation initiatives, advancing adoption, modernization, and continuous improvement of identity governance capabilities. Provide architecture leadership for Zero Trust, PAM, and regulatory compliance requirements. Technologies: AWS Active Directory Architect Azure Cloud DevSecOps IAM LDAP REST RBAC Security Support More: We are McKesson, an impact-driven Fortune 10 company working across healthcare to make quality care more accessible and affordable. We foster a culture focused on growth, well-being, and meaningful contributions. In this senior architecture role, you will shape enterprise identity security across a complex, highly regulated environment and collaborate with cybersecurity, infrastructure, application, HR, compliance, audit, and business teams. The position may be remote, hybrid, or office-based according to organizational needs, with limited travel possible. We offer a competitive compensation package, potentially including an annual bonus or long-term incentives; the base pay range is $122,100–$162,800, with compensation determined by factors such as experience, skills, performance, and location. We are an equal opportunity employer. last updated 41 week of 2026