Senior Cybersecurity Architect: Cloud, IAM & DevSecOps

McKesson; Richmond (VA); On-site; USD 122,000 - 203,000; Full time

Job summary

McKesson seeks a Senior Cyber Security Architect to lead security architecture across cloud, network, identity, endpoint, and data protection. This role partners with the CISO, technology leadership, and delivery teams to shape secure design and drive risk-reducing outcomes.

You will define target-state architectures, mentor engineers, and embed security in DevSecOps practices, ensuring compliance-by-design and measurable improvements in control effectiveness across the enterprise.

Qualifications

• 8-12+ years in cybersecurity with 5+ years in security architecture.
• Strong background in technology design, implementation, and delivery across cloud, network, identity, endpoint and applications.
• Ability to translate business requirements into secure reference architectures and pragmatic plans.
• Experience with security controls, governance, and risk management.
• Excellent communication to align stakeholders and drive security outcomes.

Responsibilities

• Own and evolve MMS security architecture reference patterns and guardrails across cloud, network, identity, endpoint, application, and data protection.
• Lead architecture reviews for key initiatives; document decisions, risks, exceptions, and compensating controls.
• Embed security in delivery through DevSecOps; advise on CI/CD, infrastructure-as-code, policy-as-code, and secrets management.
• Define target-state security architecture and roadmaps; drive alignment with security, technology, and business stakeholders.
• Mentor and coach architects and engineers; ensure high-quality, policy-aligned deliverables.

Skills

Cybersecurity

Security architecture

Risk management

Compliance

Cloud security

SIEM/EDR/XDR

Threat intelligence

IAM/PAM

Automation

Education

Bachelor's degree in computer science or related field

Tools

Kubernetes

SOAR

EDR/XDR

Bash

Python

PowerShell

Job description

McKesson seeks a Senior Cyber Security Architect to lead security architecture across cloud, network, identity, endpoint, and data protection. This role partners with the CISO, technology leadership, and delivery teams to shape secure design and drive risk-reducing outcomes.

You will define target-state architectures, mentor engineers, and embed security in DevSecOps practices, ensuring compliance-by-design and measurable improvements in control effectiveness across the enterprise.