Senior DevSecOps Architect: Secure by Design & Cloud

McKesson Medical-Surgical Inc.; Cork; On-site; EUR 83,000 - 138,000; Full time

Job summary

McKesson is seeking a senior cybersecurity engineering leader to drive enterprise application security and DevSecOps across cloud, on‑premises, and hybrid environments.

You will design scalable security controls within CI/CD pipelines and developer platforms, mentor engineers, and coordinate with platform teams to embed secure-by-design practices across apps, APIs, containers, and cloud workloads.

Qualifications

• Bachelor's degree in a relevant field or equivalent professional experience.
• 10+ years of progressive cybersecurity engineering experience.
• Experience implementing and operating enterprise-scale security tools (GitHub Advanced Security, SonarQube, OWASP ZAP).
• Experience with software supply chain security and open-source risk management tools (JFrog Xray, Black Duck, Sonatype, FOSSA).

Responsibilities

• Lead enterprise application security and DevSecOps initiatives across cloud, on-premises, and hybrid environments.
• Design and implement scalable security controls embedded within CI/CD pipelines and developer platforms.
• Drive adoption and operation of security tools including GitHub Advanced Security, OWASP ZAP, Veracode, and SonarQube.
• Lead software supply chain security programs using tools such as JFrog Xray/Curation, Black Duck, Sonatype, and FOSSA.
• Develop automation and security integrations using Python, Bash, JavaScript, or similar languages.
• Partner with engineering and platform teams to establish secure-by-design practices for applications, APIs, containers, and cloud workloads.
• Provide technical leadership during security incidents, vulnerability management, and remediation activities.
• Mentor engineers and influence enterprise security architecture, standards, and roadmaps.
• Develop and maintain security standards and controls for Kubernetes, containers, Terraform, and cloud-native platforms.
• Build and operationalize security automation and policy-as-code to reduce risk while improving developer experience.

Skills

DevSecOps

Cloud security

Application security

CI/CD security

Python

Bash

JavaScript

Kubernetes

Docker

GitHub Advanced Security

SonarQube

OWASP ZAP

JFrog Xray

SCA tools

Threat modeling

Policy-as-code

Infrastructure as Code

Cloud platforms

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Engineering, or equivalent experience

Tools

GitHub Advanced Security

SonarQube

OWASP ZAP

JFrog Xray/Curation

Black Duck

Sonatype

FOSSA

Job description

McKesson is seeking a senior cybersecurity engineering leader to drive enterprise application security and DevSecOps across cloud, on‑premises, and hybrid environments.

You will design scalable security controls within CI/CD pipelines and developer platforms, mentor engineers, and coordinate with platform teams to embed secure-by-design practices across apps, APIs, containers, and cloud workloads.