Lead Cyber Security Architect – Cloud, IAM & Zero Trust

McKesson’s Corporate; Richmond (VA); On-site; USD 180,000 - 240,000; Full time

Job summary

McKesson is seeking a Lead Cyber Security Architect in Richmond, VA to establish and evolve MMS security architecture, patterns, and guardrails across cloud, network, identity, endpoint, and data protection. You will collaborate with CISO and senior leaders to drive secure outcomes, translate business objectives into architecture decisions, and guide delivery teams through secure design.

This role includes mentoring architects, defining roadmaps, and embedding security in DevSecOps practices to

Qualifications

• 10+ years in cybersecurity with 5+ years in security architecture and risk management.
• Ability to lead complex initiatives, drive alignment, and coach others while delivering measurable security outcomes.
• Hands-on security architecture experience, including guardrails and reference architectures.

Responsibilities

• Own and evolve security architecture reference patterns and guardrails across cloud, network, identity, endpoint, application, and data protection.
• Lead architecture reviews for major initiatives; document decisions, risks, exceptions, and compensating controls.
• Translate policy, risk, and regulatory obligations into design standards and runbooks.
• Define target-state security architecture and roadmaps; align with stakeholders.
• Embed security in delivery through DevSecOps: CI/CD, IaC, secrets management, and secure SDLC practices.
• Mentor architects and engineers; perform critical reviews to ensure high quality and alignment.
• Design and maintain cloud security patterns (IAM, encryption, logging, posture management) with implementation guidance.
• Perform other duties as assigned.

Skills

Security architecture

Zero Trust

IAM/PAM

Cloud security

Scripting/Python/Bash

DevSecOps

Risk and compliance

Stakeholder leadership

Security automation

Education

Bachelor's degree in computer science or related field

Tools

SIEM

EDR/XDR

SOAR

Policies as code

Kubernetes

Automation scripting

Job description

McKesson is seeking a Lead Cyber Security Architect in Richmond, VA to establish and evolve MMS security architecture, patterns, and guardrails across cloud, network, identity, endpoint, and data protection. You will collaborate with CISO and senior leaders to drive secure outcomes, translate business objectives into architecture decisions, and guide delivery teams through secure design.

This role includes mentoring architects, defining roadmaps, and embedding security in DevSecOps practices to