McKesson

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve - we care. What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow's health today, we want to hear from you. The McKesson Pentest Team is seeking a Penetration Testing Engineer to help support and scale McKesson's Continuous Adversarial Testing (CART) program and strengthen the security posture of our enterprise application ecosystem. This role provides technical support for offensive security programs, focusing on AI-enabled security testing, web application penetration testing, cloud security assessments, vulnerability validation, and adversarial testing across large-scale application portfolios. The individual in this role will partner with a pentest lead, engineering, product, cloud, and security teams to identify complex attack paths, validate threats, and drive remediation efforts that reduce business risk. The position will play a key role in executing autonomous security testing capabilities, integrating CART outputs into security operations, and advancing McKesson's offensive security assessments. This role will also help shape the future direction of AI-assisted security testing, automation, and modern offensive security methodologies across the enterprise. This is a hands-on technical role for someone who can support the development of a new security program while also performing advanced technical testing, validating AI-generated findings, solving operational challenges, and supporting the long-term direction of McKesson's offensive security capabilities. What You'll Do Work closely with a Lead Pentest Engineer to Implement McKesson's Continuous Adversarial Testing program across large application portfolios. Support and help shape the first iteration of the CART operating model. Execute and refine repeatable onboarding processes covering application context, test accounts, authentication, authorization roles, test data, rate limits, WAF coordination, exclusions, maintenance windows, and emergency stop procedures. Perform human-in-the-loop reviewing, reproducing, validating, prioritizing, and communicating findings generated by autonomous testing platforms. Support the execution of continuous AI assisted penetration tests across high-priority enterprise web applications, including application onboarding, test orchestration, execution oversight, findings validation, and remediation coordination. Implement integrations between CART platforms and vulnerability management, engineering, reporting, and remediation workflows. Conduct AI-enabled web application, API, and cloud security assessments across enterprise environments. Perform penetration testing, adversarial assessments, and vulnerability validation activities against internally developed and third-party applications. Evaluate emerging autonomous security testing capabilities and recommend changes to CART strategy, tooling, and service delivery. Contribute to program documentation including; playbooks, runbooks, technical standards, training materials. Leverage automation and AI-assisted security tooling to scale testing coverage and improve assessment efficiency. Identify and validate complex attack paths involving authentication weaknesses, authorization flaws, business logic vulnerabilities, and multi-stage exploitation scenarios. Evaluate REST APIs, GraphQL APIs, cloud-native architectures, and modern authentication technologies. Partner with engineering teams to explain findings, prioritize remediation efforts, and validate fixes through retesting. Develop and maintain testing methodologies, automation workflows, and security assessment procedures. Contribute to incident investigations, threat modeling activities, and continuous security improvement initiatives. Basic Requirements 4+ years of cybersecurity, application security, penetration testing, offensive security, or related experience. Bachelor's degree or equivalent combination of education and experience. Experience performing web application and API penetration testing. Experience validating security vulnerabilities, assessing exploitability, and distinguishing actionable findings from false positives. Experience assessing enterprise applications utilizing REST APIs, GraphQL APIs, authentication systems, and cloud-native technologies. Working knowledge of AWS, Azure, or Google Cloud Platform (GCP) security concepts. Experience documenting technical findings and communicating remediation guidance to engineering teams. Hands-on experience with Burp Suite Professional, Nuclei, Nmap, Metasploit, Postman, and Kali Linux tools. Preferred Skills/Experience Experience leveraging AI-assisted security tools and security automation platforms. Experience implementing, operating, or scaling continuous security testing, attack simulation, breach and attack simulation, or automated offensive security capabilities. Experience evaluating, validating, and triaging findings from automated or AI-assisted security testing platforms. Experience assessing AI-enabled applications, agent-based systems, LLM integrations, or AI security risks. Familiarity with DevSecOps, CI/CD security controls, and secure software development practices. Knowledge of OWASP Top 10, API Security Top 10, threat modeling, and secure design principles. Experience conducting red team, adversarial simulation, or attack path validation exercises. Knowledge of cloud security architecture and containerized environments. Experience performing cloud security assessments in AWS, Azure, and GCP environments. Experience creating custom security testing scripts and automation workflows. Experience developing proof-of-concept exploits and adversary emulation scenarios. Familiarity with security control validation and compliance frameworks. Experience mentoring engineers and contributing to security program maturity. Experience supporting regulated industries such as healthcare, finance, or other highly regulated environments. Relevant certifications such as OSCP, OSWE, OSWA, OSAI, HTB CWES, HTB CWEE, OSEP, GPEN, GWAPT or equivalent. Travel / Work Environment / Physical Requirements Limited travel may be required based on business needs. Hyrbid, two days a week in the office. We are proud to offer a competitive compensation package at McKesson as part of our Total Rewards. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy, and pay will always be compliant with any applicable regulations. In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered. For more information regarding benefits at McKesson, please click here. Our Base Pay Range for this position $103,900 - $173,100 McKesson has become aware of online recruiting-related scams in which individuals who are not affiliated with or authorized by McKesson are using McKesson's (or affiliated entities, like CoverMyMeds or RxCrossroads) name in fraudulent emails, job postings or social media messages. In light of these scams, please bear the following in mind: McKesson Talent Advisors will never solicit money or credit card information in connection with a McKesson job application. McKesson Talent Advisors do not communicate with candidates via online chatrooms or using email accounts such as Gmail or Hotmail. Note that McKesson does rely on a virtual assistant (Gia) for certain recruiting-related communications with candidates. McKesson job postings are posted on our career site: . McKesson is an Equal Opportunity Employer McKesson provides equal employment opportunities to applicants and employees, without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, age, genetic information, or any other legally protected category. For additional information on McKesson's full Equal Employment Opportunity policies, visit our Equal Employment Opportunity page. McKesson is committed to being an Equal Employment Opportunity Employer and offers opportunities to all job seekers including job seekers with disabilities. If you need a reasonable accommodation to assist with your job search or application for employment, please contact us by sending an email to (United States) or (Canada) . Resumes or CVs submitted to this email box will not be accepted. Join us at McKesson!

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve - we care. What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow's health today, we want to hear from you. About the Role McKesson is seeking a Senior Information Security Analyst to strengthen our cloud security posture and reduce enterprise cyber risk. You will lead the triage, prioritization, remediation, and validation of cloud security findings identified through Wiz. In this role, you will partner with application, cloud platform, engineering, and infrastructure teams to resolve Critical and High-risk vulnerabilities, establish ownership for unknown cloud assets, and manage security exceptions. You will translate technical findings into clear remediation plans, operational metrics, and leadership reporting. This position is ideal for a cybersecurity professional experienced in cloud vulnerability management, exposure management, risk-based prioritization, and cross-functional remediation. The underlying P4 career-model description calls for advanced cybersecurity expertise, cross-functional collaboration, remediation leadership, technical documentation, and influence across enterprise security activities. What You'll Do Monitor and manage vulnerabilities, misconfigurations, attack paths, and other cloud security findings identified through Wiz. Triage and prioritize findings using severity, exploitability, exposure, business impact, asset criticality, and enterprise remediation standards. Drive remediation of Critical, High-risk, and overdue findings by establishing action plans with application, platform, engineering, and infrastructure owners. Investigate cloud assets without identified ownership, including virtual machines, containers, workloads, and serverless resources, and coordinate handoff to accountable teams. Review suppression, exemption, dismissal, and risk-acceptance requests; validate supporting evidence and maintain audit-ready disposition records. Validate vulnerability closure, facilitate root-cause investigations, identify recurring issues, and recommend strategic risk-reduction initiatives. Improve remediation workflows, ownership assignment, governance, reporting, and automation, including integrations involving Wiz, ServiceNow, Rapid7, and Panorama. Report on Mean Time to Remediate, Critical and High findings, overdue vulnerabilities, exception volumes, unknown assets, remediation trends, and risk-reduction outcomes. Basic Requirements 7+ years of progressive experience in cybersecurity engineering, cloud security, vulnerability management, exposure management, infrastructure security, or a closely related field. Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, or a related discipline, or an equivalent combination of education and relevant experience. Demonstrated experience triaging, prioritizing, and driving remediation of cloud vulnerabilities or security findings. Hands-on experience using Wiz or a comparable cloud security, CNAPP, CSPM, or vulnerability-management platform. Experience applying risk-based prioritization using technical severity, exploitability, exposure, asset context, and business risk. Experience partnering with cloud, application, engineering, or infrastructure teams to coordinate security remediation within GCP, AWS, or Azure cloud architectures. Experience evaluating security findings in the context of cloud architecture, including vulnerability exceptions, risk acceptances, suppressions, and other dispositions, within GCP, AWS, or Azure. Experience developing security metrics, remediation reporting, and written documentation for technical and leadership audiences. Preferred Skills/Experience Experience with Wiz Vulnerability Management, Wiz Security Graph, cloud exposure analysis, or attack-path investigation. Familiarity with ServiceNow, Rapid7, or integrations supporting vulnerability tracking and remediation workflows. Knowledge of cloud workloads, virtual machines, containers, serverless technologies, and cloud asset inventories. Experience automating reporting, remediation tracking, asset ownership assignment, or security workflow processes. Understanding of vulnerability-management governance, remediation service-level expectations, exception management, and audit documentation. Experience facilitating remediation reviews, resolving ownership gaps, and escalating overdue security findings. Ability to translate technical risk into concise, actionable communication for engineering teams and leadership. Relevant certifications such as CISSP, CCSP, Security+, AWS Certified Security, Azure Security Engineer, or comparable credentials. Travel, Work Environment and Physical Requirements Work arrangement and in-office expectations will be based on the position's approved location and team requirements. Travel requirements, if any, will be specified in the final posting. Work primarily involves using standard computer and collaboration technology. We are proud to offer a competitive compensation package at McKesson as part of our Total Rewards. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy, and pay will always be compliant with any applicable regulations. In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered. For more information regarding benefits at McKesson, please click here. Our Base Pay Range for this position $122,300 - $203,900 McKesson has become aware of online recruiting-related scams in which individuals who are not affiliated with or authorized by McKesson are using McKesson's (or affiliated entities, like CoverMyMeds or RxCrossroads) name in fraudulent emails, job postings or social media messages. In light of these scams, please bear the following in mind: McKesson Talent Advisors will never solicit money or credit card information in connection with a McKesson job application. McKesson Talent Advisors do not communicate with candidates via online chatrooms or using email accounts such as Gmail or Hotmail. Note that McKesson does rely on a virtual assistant (Gia) for certain recruiting-related communications with candidates. McKesson job postings are posted on our career site: . McKesson is an Equal Opportunity Employer McKesson provides equal employment opportunities to applicants and employees, without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, age, genetic information, or any other legally protected category. For additional information on McKesson's full Equal Employment Opportunity policies, visit our Equal Employment Opportunity page. McKesson is committed to being an Equal Employment Opportunity Employer and offers opportunities to all job seekers including job seekers with disabilities. If you need a reasonable accommodation to assist with your job search or application for employment, please contact us by sending an email to (United States) or (Canada) . Resumes or CVs submitted to this email box will not be accepted. Join us at McKesson!

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve - we care. What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow's health today, we want to hear from you. The McKesson Pentest Team is seeking a Penetration Testing Engineer to help support and scale McKesson's Continuous Adversarial Testing (CART) program and strengthen the security posture of our enterprise application ecosystem. This role provides technical support for offensive security programs, focusing on AI-enabled security testing, web application penetration testing, cloud security assessments, vulnerability validation, and adversarial testing across large-scale application portfolios. The individual in this role will partner with a pentest lead, engineering, product, cloud, and security teams to identify complex attack paths, validate threats, and drive remediation efforts that reduce business risk. The position will play a key role in executing autonomous security testing capabilities, integrating CART outputs into security operations, and advancing McKesson's offensive security assessments. This role will also help shape the future direction of AI-assisted security testing, automation, and modern offensive security methodologies across the enterprise. This is a hands-on technical role for someone who can support the development of a new security program while also performing advanced technical testing, validating AI-generated findings, solving operational challenges, and supporting the long-term direction of McKesson's offensive security capabilities. What You'll Do Work closely with a Lead Pentest Engineer to Implement McKesson's Continuous Adversarial Testing program across large application portfolios. Support and help shape the first iteration of the CART operating model. Execute and refine repeatable onboarding processes covering application context, test accounts, authentication, authorization roles, test data, rate limits, WAF coordination, exclusions, maintenance windows, and emergency stop procedures. Perform human-in-the-loop reviewing, reproducing, validating, prioritizing, and communicating findings generated by autonomous testing platforms. Support the execution of continuous AI assisted penetration tests across high-priority enterprise web applications, including application onboarding, test orchestration, execution oversight, findings validation, and remediation coordination. Implement integrations between CART platforms and vulnerability management, engineering, reporting, and remediation workflows. Conduct AI-enabled web application, API, and cloud security assessments across enterprise environments. Perform penetration testing, adversarial assessments, and vulnerability validation activities against internally developed and third-party applications. Evaluate emerging autonomous security testing capabilities and recommend changes to CART strategy, tooling, and service delivery. Contribute to program documentation including; playbooks, runbooks, technical standards, training materials. Leverage automation and AI-assisted security tooling to scale testing coverage and improve assessment efficiency. Identify and validate complex attack paths involving authentication weaknesses, authorization flaws, business logic vulnerabilities, and multi-stage exploitation scenarios. Evaluate REST APIs, GraphQL APIs, cloud-native architectures, and modern authentication technologies. Partner with engineering teams to explain findings, prioritize remediation efforts, and validate fixes through retesting. Develop and maintain testing methodologies, automation workflows, and security assessment procedures. Contribute to incident investigations, threat modeling activities, and continuous security improvement initiatives. Basic Requirements 4+ years of cybersecurity, application security, penetration testing, offensive security, or related experience. Bachelor's degree or equivalent combination of education and experience. Experience performing web application and API penetration testing. Experience validating security vulnerabilities, assessing exploitability, and distinguishing actionable findings from false positives. Experience assessing enterprise applications utilizing REST APIs, GraphQL APIs, authentication systems, and cloud-native technologies. Working knowledge of AWS, Azure, or Google Cloud Platform (GCP) security concepts. Experience documenting technical findings and communicating remediation guidance to engineering teams. Hands-on experience with Burp Suite Professional, Nuclei, Nmap, Metasploit, Postman, and Kali Linux tools. Preferred Skills/Experience Experience leveraging AI-assisted security tools and security automation platforms. Experience implementing, operating, or scaling continuous security testing, attack simulation, breach and attack simulation, or automated offensive security capabilities. Experience evaluating, validating, and triaging findings from automated or AI-assisted security testing platforms. Experience assessing AI-enabled applications, agent-based systems, LLM integrations, or AI security risks. Familiarity with DevSecOps, CI/CD security controls, and secure software development practices. Knowledge of OWASP Top 10, API Security Top 10, threat modeling, and secure design principles. Experience conducting red team, adversarial simulation, or attack path validation exercises. Knowledge of cloud security architecture and containerized environments. Experience performing cloud security assessments in AWS, Azure, and GCP environments. Experience creating custom security testing scripts and automation workflows. Experience developing proof-of-concept exploits and adversary emulation scenarios. Familiarity with security control validation and compliance frameworks. Experience mentoring engineers and contributing to security program maturity. Experience supporting regulated industries such as healthcare, finance, or other highly regulated environments. Relevant certifications such as OSCP, OSWE, OSWA, OSAI, HTB CWES, HTB CWEE, OSEP, GPEN, GWAPT or equivalent. Travel / Work Environment / Physical Requirements Limited travel may be required based on business needs. Hyrbid, two days a week in the office. We are proud to offer a competitive compensation package at McKesson as part of our Total Rewards. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy, and pay will always be compliant with any applicable regulations. In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered. For more information regarding benefits at McKesson, please click here. Our Base Pay Range for this position $103,900 - $173,100 McKesson has become aware of online recruiting-related scams in which individuals who are not affiliated with or authorized by McKesson are using McKesson's (or affiliated entities, like CoverMyMeds or RxCrossroads) name in fraudulent emails, job postings or social media messages. In light of these scams, please bear the following in mind: McKesson Talent Advisors will never solicit money or credit card information in connection with a McKesson job application. McKesson Talent Advisors do not communicate with candidates via online chatrooms or using email accounts such as Gmail or Hotmail. Note that McKesson does rely on a virtual assistant (Gia) for certain recruiting-related communications with candidates. McKesson job postings are posted on our career site: . McKesson is an Equal Opportunity Employer McKesson provides equal employment opportunities to applicants and employees, without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, age, genetic information, or any other legally protected category. For additional information on McKesson's full Equal Employment Opportunity policies, visit our Equal Employment Opportunity page. McKesson is committed to being an Equal Employment Opportunity Employer and offers opportunities to all job seekers including job seekers with disabilities. If you need a reasonable accommodation to assist with your job search or application for employment, please contact us by sending an email to (United States) or (Canada) . Resumes or CVs submitted to this email box will not be accepted. Join us at McKesson!

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve - we care. What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow's health today, we want to hear from you. About the Role McKesson is seeking a Senior Information Security Analyst to strengthen our cloud security posture and reduce enterprise cyber risk. You will lead the triage, prioritization, remediation, and validation of cloud security findings identified through Wiz. In this role, you will partner with application, cloud platform, engineering, and infrastructure teams to resolve Critical and High-risk vulnerabilities, establish ownership for unknown cloud assets, and manage security exceptions. You will translate technical findings into clear remediation plans, operational metrics, and leadership reporting. This position is ideal for a cybersecurity professional experienced in cloud vulnerability management, exposure management, risk-based prioritization, and cross-functional remediation. The underlying P4 career-model description calls for advanced cybersecurity expertise, cross-functional collaboration, remediation leadership, technical documentation, and influence across enterprise security activities. What You'll Do Monitor and manage vulnerabilities, misconfigurations, attack paths, and other cloud security findings identified through Wiz. Triage and prioritize findings using severity, exploitability, exposure, business impact, asset criticality, and enterprise remediation standards. Drive remediation of Critical, High-risk, and overdue findings by establishing action plans with application, platform, engineering, and infrastructure owners. Investigate cloud assets without identified ownership, including virtual machines, containers, workloads, and serverless resources, and coordinate handoff to accountable teams. Review suppression, exemption, dismissal, and risk-acceptance requests; validate supporting evidence and maintain audit-ready disposition records. Validate vulnerability closure, facilitate root-cause investigations, identify recurring issues, and recommend strategic risk-reduction initiatives. Improve remediation workflows, ownership assignment, governance, reporting, and automation, including integrations involving Wiz, ServiceNow, Rapid7, and Panorama. Report on Mean Time to Remediate, Critical and High findings, overdue vulnerabilities, exception volumes, unknown assets, remediation trends, and risk-reduction outcomes. Basic Requirements 7+ years of progressive experience in cybersecurity engineering, cloud security, vulnerability management, exposure management, infrastructure security, or a closely related field. Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, or a related discipline, or an equivalent combination of education and relevant experience. Demonstrated experience triaging, prioritizing, and driving remediation of cloud vulnerabilities or security findings. Hands-on experience using Wiz or a comparable cloud security, CNAPP, CSPM, or vulnerability-management platform. Experience applying risk-based prioritization using technical severity, exploitability, exposure, asset context, and business risk. Experience partnering with cloud, application, engineering, or infrastructure teams to coordinate security remediation within GCP, AWS, or Azure cloud architectures. Experience evaluating security findings in the context of cloud architecture, including vulnerability exceptions, risk acceptances, suppressions, and other dispositions, within GCP, AWS, or Azure. Experience developing security metrics, remediation reporting, and written documentation for technical and leadership audiences. Preferred Skills/Experience Experience with Wiz Vulnerability Management, Wiz Security Graph, cloud exposure analysis, or attack-path investigation. Familiarity with ServiceNow, Rapid7, or integrations supporting vulnerability tracking and remediation workflows. Knowledge of cloud workloads, virtual machines, containers, serverless technologies, and cloud asset inventories. Experience automating reporting, remediation tracking, asset ownership assignment, or security workflow processes. Understanding of vulnerability-management governance, remediation service-level expectations, exception management, and audit documentation. Experience facilitating remediation reviews, resolving ownership gaps, and escalating overdue security findings. Ability to translate technical risk into concise, actionable communication for engineering teams and leadership. Relevant certifications such as CISSP, CCSP, Security+, AWS Certified Security, Azure Security Engineer, or comparable credentials. Travel, Work Environment and Physical Requirements Work arrangement and in-office expectations will be based on the position's approved location and team requirements. Travel requirements, if any, will be specified in the final posting. Work primarily involves using standard computer and collaboration technology. We are proud to offer a competitive compensation package at McKesson as part of our Total Rewards. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy, and pay will always be compliant with any applicable regulations. In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered. For more information regarding benefits at McKesson, please click here. Our Base Pay Range for this position $122,300 - $203,900 McKesson has become aware of online recruiting-related scams in which individuals who are not affiliated with or authorized by McKesson are using McKesson's (or affiliated entities, like CoverMyMeds or RxCrossroads) name in fraudulent emails, job postings or social media messages. In light of these scams, please bear the following in mind: McKesson Talent Advisors will never solicit money or credit card information in connection with a McKesson job application. McKesson Talent Advisors do not communicate with candidates via online chatrooms or using email accounts such as Gmail or Hotmail. Note that McKesson does rely on a virtual assistant (Gia) for certain recruiting-related communications with candidates. McKesson job postings are posted on our career site: . McKesson is an Equal Opportunity Employer McKesson provides equal employment opportunities to applicants and employees, without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, age, genetic information, or any other legally protected category. For additional information on McKesson's full Equal Employment Opportunity policies, visit our Equal Employment Opportunity page. McKesson is committed to being an Equal Employment Opportunity Employer and offers opportunities to all job seekers including job seekers with disabilities. If you need a reasonable accommodation to assist with your job search or application for employment, please contact us by sending an email to (United States) or (Canada) . Resumes or CVs submitted to this email box will not be accepted. Join us at McKesson!

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve - we care. What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow's health today, we want to hear from you. Role Overview The Pricing Operations Coordinator is the central intake and coordination point for pricing requests across Masters. The role routes and tracks requests to completion, monitors service levels, maintains the documentation and issue logs that support pricing controls, and reports on operational performance. Working under moderate supervision, the Coordinator applies established pricing processes to resolve routine and moderately complex operational issues. The role partners daily with Sales Representatives, Account Managers, Strategic Account teams, and Purchasing, and is key to making pricing support timely, traceable, and scalable. Key Responsibilities Pricing Request Intake & Coordination - Serve as the primary intake resource for pricing requests and inquiries from Sales, Account Management, Strategic Accounts, and Purchasing. Review, prioritize, categorize, and route requests; document and track each through completion; monitor queues and escalate aging items. Workflow Governance & SLA Management - Monitor adherence to Pricing Operations service level agreements, maintain request tracking and workflow tools, and provide operational metrics and reporting for workload management and leadership visibility. Identify bottlenecks and recurring issues for process improvement. Documentation & Knowledge Management - Create and maintain SOPs, process documentation, job aids, and training materials. Keep documentation current as pricing programs and price files evolve, and maintain centralized knowledge repositories that support onboarding and cross-training. Quality Assurance, Audit & Exception Management - Maintain issue logs and exception tracking tied to pricing controls, assist with root cause investigation of pricing discrepancies, and ensure audit evidence and supporting documentation are retained in line with governance requirements. Testing, Change Management & Continuity Support - Coordinate testing for pricing system enhancements and new workflows, document test scenarios and results, and support deployment readiness and change communications. Maintain continuity and coverage documentation to reduce key-person dependencies. Additional duties as assigned. Minimum Requirement Degree and typically requires 2+ years of relevant experience. Education Bachelor's degree in Business, Finance, Supply Chain, Analytics, or a related field; equivalent experience considered. Critical Skills 2+ years in pricing, sales support, operations coordination, business analysis, or a comparable process-driven role. Proficient in Microsoft Excel, Word, PowerPoint, and Teams; experience maintaining trackers, reports, and dashboards. Strong organizational, time management, and prioritization skills with high attention to detail. Excellent written and verbal communication; able to coordinate across Sales, Purchasing, and Pricing stakeholders. Ability to manage multiple priorities in a fast-paced operational environment. Preferred Qualifications Pharmaceutical distribution or B2B pricing operations experience; secondary wholesale a plus. Experience with SLA management, ticketing, or workflow management tools. Familiarity with pricing governance, operational controls, and audit documentation. Experience writing SOPs, job aids, or training materials. Exposure to SAP, SQL, Power BI, or Tableau. Success Measures Pricing requests routed accurately and completed within SLA targets. Documentation current, accessible, and audit-ready. Issue logs and exception tracking provide complete traceability. Governance controls consistently followed. Continuity documentation and cross-training plans maintained. Sales and business partners report timely, transparent operational support. Working Conditions Environment - Remote (Work at Home); occasional travel to Las Colinas or Mason, OH. Physical Requirements - Primarily computer-based work; no lifting requirements. Salary: 61,100.00 - 81 800.00 USD Annual with 5% MIP Target salary comp approx. 78-82K with 5% MIP P2 This role is a hybrid position. The selected candidate is expected to work on-site at our Las Colinas office a minimum of two (2) days per week, with the remaining days worked remotely. Specific in-office days may be designated based on team needs and business priorities. We are proud to offer a competitive compensation package at McKesson as part of our Total Rewards. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy, and pay will always be compliant with any applicable regulations. In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered. For more information regarding benefits at McKesson, please click here. Our Base Pay Range for this position $61,100 - $101,800 McKesson has become aware of online recruiting-related scams in which individuals who are not affiliated with or authorized by McKesson are using McKesson's (or affiliated entities, like CoverMyMeds or RxCrossroads) name in fraudulent emails, job postings or social media messages. In light of these scams, please bear the following in mind: McKesson Talent Advisors will never solicit money or credit card information in connection with a McKesson job application. McKesson Talent Advisors do not communicate with candidates via online chatrooms or using email accounts such as Gmail or Hotmail. Note that McKesson does rely on a virtual assistant (Gia) for certain recruiting-related communications with candidates. McKesson job postings are posted on our career site: . McKesson is an Equal Opportunity Employer McKesson provides equal employment opportunities to applicants and employees, without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, age, genetic information, or any other legally protected category. For additional information on McKesson's full Equal Employment Opportunity policies, visit our Equal Employment Opportunity page. McKesson is committed to being an Equal Employment Opportunity Employer and offers opportunities to all job seekers including job seekers with disabilities. If you need a reasonable accommodation to assist with your job search or application for employment, please contact us by sending an email to (United States) or (Canada) . Resumes or CVs submitted to this email box will not be accepted. Join us at McKesson!

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve - we care. What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow's health today, we want to hear from you. Position Summary (Purpose of job): McKesson is seeking a Senior Business Systems Analyst to support the strategy, implementation, and optimization of technology solutions across Quality, Manufacturing, and Supply Chain operations. This role partners with business and technology teams to translate complex business needs into scalable system solutions that enhance c ompliance, operational efficiency, and customer outcomes. The ideal candidate brings expertise in Quality Management Systems (QMS), GMP-regulated environments, and end-to-end Supply Chain IT systems while serving as a trusted advisor on enterprise technology initiatives. What You'll Do Partner with Quality, Manufacturing, Supply Chain, and IT stakeholders to define business requirements and solution strategies. Lead requirements gathering workshops, process mapping sessions, and stakeholder interviews. Translate business priorities into detailed functional and technical requirements. Support and optimize Quality Management Systems including CAPA, Change Control, Deviations, Non-Conformance Management, Document Control, and Audit Management. Evaluate business processes and identify opportunities for automation, standardization, and digital transformation. Assess solution impacts, risks, integrations, and deployment readiness across enterprise platforms. Support User Acceptance Testing (UAT), validation activities, and change management initiatives. Collaborate with project teams to deliver compliant, scalable, and secure technology solutions aligned with business objectives . Minimum Requirements Degree or equivalent and typically requires 7+ years of relevant experience. Basic Requirements Demonstrated experience gathering, documenting, and managing business and system requirements. Experience supporting Quality Management Systems (QMS), including CAPA, Change Control, Deviations, Non-Conformance Management, Document Control, and Audit Management. Experience working with end-to-end Supply Chain IT systems, including planning, procurement, manufacturing, inventory, logistics , or distribution processes. Proven ability to facilitate stakeholder workshops and drive requirements alignment across multiple teams. Experience supporting User Acceptance Testing (UAT) and solution deployment activities. Strong communication , analytical, problem-solving, and stakeholder management skills. Preferred Skills/Experience Bachelor's degree or equivalent combination of education and experience. Experience operating in GMP, GxP , pharmaceutical, medical device, healthcare, or regulated manufacturing environments. GMP certification or demonstrated experience within GMP-regulated organizations. Experience with ERP, MES, Quality, Manufacturing, or Supply Chain technology platforms. Knowledge of SDLC, validation, risk assessment, and compliance processes. Experience with business process automation, workflow optimization, and digital transformation initiatives. Familiarity with predictive analytics, process modeling, and reporting tools. Experience influencing cross-functional stakeholders and enterprise initiatives. Advanced degree and/or relevant industry certifications. Travel, Work Location & Physical Requirements Limited travel may be required based on business needs. Ability to work in a hybrid or remote environment while collaborating effectively with cross-functional teams. Ability to participate in meetings, workshops, and system testing activities using standard technology tools. We are proud to offer a competitive compensation package at McKesson as part of our Total Rewards. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy, and pay will always be compliant with any applicable regulations. In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered. For more information regarding benefits at McKesson, please click here. Our Base Pay Range for this position $111,100 - $185,100 McKesson has become aware of online recruiting-related scams in which individuals who are not affiliated with or authorized by McKesson are using McKesson's (or affiliated entities, like CoverMyMeds or RxCrossroads) name in fraudulent emails, job postings or social media messages. In light of these scams, please bear the following in mind: McKesson Talent Advisors will never solicit money or credit card information in connection with a McKesson job application. McKesson Talent Advisors do not communicate with candidates via online chatrooms or using email accounts such as Gmail or Hotmail. Note that McKesson does rely on a virtual assistant (Gia) for certain recruiting-related communications with candidates. McKesson job postings are posted on our career site: . McKesson is an Equal Opportunity Employer McKesson provides equal employment opportunities to applicants and employees, without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, age, genetic information, or any other legally protected category. For additional information on McKesson's full Equal Employment Opportunity policies, visit our Equal Employment Opportunity page. McKesson is committed to being an Equal Employment Opportunity Employer and offers opportunities to all job seekers including job seekers with disabilities. If you need a reasonable accommodation to assist with your job search or application for employment, please contact us by sending an email to (United States) or (Canada) . Resumes or CVs submitted to this email box will not be accepted. Join us at McKesson!

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve - we care. What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow's health today, we want to hear from you. About the Role McKesson is seeking a Senior Information Security Analyst to strengthen our cloud security posture and reduce enterprise cyber risk. You will lead the triage, prioritization, remediation, and validation of cloud security findings identified through Wiz. In this role, you will partner with application, cloud platform, engineering, and infrastructure teams to resolve Critical and High-risk vulnerabilities, establish ownership for unknown cloud assets, and manage security exceptions. You will translate technical findings into clear remediation plans, operational metrics, and leadership reporting. This position is ideal for a cybersecurity professional experienced in cloud vulnerability management, exposure management, risk-based prioritization, and cross-functional remediation. The underlying P4 career-model description calls for advanced cybersecurity expertise, cross-functional collaboration, remediation leadership, technical documentation, and influence across enterprise security activities. What You'll Do Monitor and manage vulnerabilities, misconfigurations, attack paths, and other cloud security findings identified through Wiz. Triage and prioritize findings using severity, exploitability, exposure, business impact, asset criticality, and enterprise remediation standards. Drive remediation of Critical, High-risk, and overdue findings by establishing action plans with application, platform, engineering, and infrastructure owners. Investigate cloud assets without identified ownership, including virtual machines, containers, workloads, and serverless resources, and coordinate handoff to accountable teams. Review suppression, exemption, dismissal, and risk-acceptance requests; validate supporting evidence and maintain audit-ready disposition records. Validate vulnerability closure, facilitate root-cause investigations, identify recurring issues, and recommend strategic risk-reduction initiatives. Improve remediation workflows, ownership assignment, governance, reporting, and automation, including integrations involving Wiz, ServiceNow, Rapid7, and Panorama. Report on Mean Time to Remediate, Critical and High findings, overdue vulnerabilities, exception volumes, unknown assets, remediation trends, and risk-reduction outcomes. Basic Requirements 7+ years of progressive experience in cybersecurity engineering, cloud security, vulnerability management, exposure management, infrastructure security, or a closely related field. Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, or a related discipline, or an equivalent combination of education and relevant experience. Demonstrated experience triaging, prioritizing, and driving remediation of cloud vulnerabilities or security findings. Hands-on experience using Wiz or a comparable cloud security, CNAPP, CSPM, or vulnerability-management platform. Experience applying risk-based prioritization using technical severity, exploitability, exposure, asset context, and business risk. Experience partnering with cloud, application, engineering, or infrastructure teams to coordinate security remediation within GCP, AWS, or Azure cloud architectures. Experience evaluating security findings in the context of cloud architecture, including vulnerability exceptions, risk acceptances, suppressions, and other dispositions, within GCP, AWS, or Azure. Experience developing security metrics, remediation reporting, and written documentation for technical and leadership audiences. Preferred Skills/Experience Experience with Wiz Vulnerability Management, Wiz Security Graph, cloud exposure analysis, or attack-path investigation. Familiarity with ServiceNow, Rapid7, or integrations supporting vulnerability tracking and remediation workflows. Knowledge of cloud workloads, virtual machines, containers, serverless technologies, and cloud asset inventories. Experience automating reporting, remediation tracking, asset ownership assignment, or security workflow processes. Understanding of vulnerability-management governance, remediation service-level expectations, exception management, and audit documentation. Experience facilitating remediation reviews, resolving ownership gaps, and escalating overdue security findings. Ability to translate technical risk into concise, actionable communication for engineering teams and leadership. Relevant certifications such as CISSP, CCSP, Security+, AWS Certified Security, Azure Security Engineer, or comparable credentials. Travel, Work Environment and Physical Requirements Work arrangement and in-office expectations will be based on the position's approved location and team requirements. Travel requirements, if any, will be specified in the final posting. Work primarily involves using standard computer and collaboration technology. We are proud to offer a competitive compensation package at McKesson as part of our Total Rewards. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy, and pay will always be compliant with any applicable regulations. In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered. For more information regarding benefits at McKesson, please click here. Our Base Pay Range for this position $122,300 - $203,900 McKesson has become aware of online recruiting-related scams in which individuals who are not affiliated with or authorized by McKesson are using McKesson's (or affiliated entities, like CoverMyMeds or RxCrossroads) name in fraudulent emails, job postings or social media messages. In light of these scams, please bear the following in mind: McKesson Talent Advisors will never solicit money or credit card information in connection with a McKesson job application. McKesson Talent Advisors do not communicate with candidates via online chatrooms or using email accounts such as Gmail or Hotmail. Note that McKesson does rely on a virtual assistant (Gia) for certain recruiting-related communications with candidates. McKesson job postings are posted on our career site: . McKesson is an Equal Opportunity Employer McKesson provides equal employment opportunities to applicants and employees, without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, age, genetic information, or any other legally protected category. For additional information on McKesson's full Equal Employment Opportunity policies, visit our Equal Employment Opportunity page. McKesson is committed to being an Equal Employment Opportunity Employer and offers opportunities to all job seekers including job seekers with disabilities. If you need a reasonable accommodation to assist with your job search or application for employment, please contact us by sending an email to (United States) or (Canada) . Resumes or CVs submitted to this email box will not be accepted. Join us at McKesson!

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve - we care. What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow's health today, we want to hear from you. About the Role McKesson is seeking a Senior Product Manager, Finance Systems & ERP Transformation to help modernize and optimize Finance technology capabilities across General Ledger, Accounts Payable, Accounts Receivable, Financial Close, Reporting, and related Finance processes. In this role, you will partner with Finance, Accounting, Decision Intelligence, Technology, and business stakeholders to translate business needs into clear requirements, product priorities, and scalable system solutions. This role is ideal for a finance systems product leader who understands ERP platforms, financial operations, data quality, reporting, controls, and Agile delivery. You will own and prioritize the Finance Systems product backlog, support roadmap planning, and help prepare the organization for future ERP transformation initiatives, including SAP S/4HANA. What You'll Do Serve as a key liaison between Finance stakeholders and technology teams to translate business needs into actionable requirements, user stories, and delivery outcomes. Manage and prioritize the Finance Systems product backlog, including epics, features, acceptance criteria, release readiness, and stakeholder communication. Partner with Finance leaders to evaluate, optimize, and standardize processes across GL, AP, AR, Fixed Assets, Financial Reporting, Budgeting, Forecasting, and Close. Lead requirements gathering, process mapping, gap analysis, solution design, and business case development for Finance systems initiatives. Support ERP transformation readiness, including SAP S/4HANA planning, process alignment, UAT, change management, adoption, and business readiness. Collaborate with engineering, data, analytics, integration, vendor, and platform teams to deliver scalable Finance reporting, data quality, and automation improvements. Define Finance data quality, reconciliation, validation, reporting, lineage, and acceptance criteria to support trusted financial information. Support change control, release governance, SOX-aware requirements, auditability, and operational readiness for Finance system enhancements. Basic Requirements 7+ years of experience in Finance Systems, Business Analysis, Product Management, ERP implementations, Finance transformation, or related roles. Bachelor's degree in Computer Science, Engineering, Information Technology, or a related field, or equivalent practical experience. Experience with Finance processes such as General Ledger, Accounts Payable, Accounts Receivable, Fixed Assets, Financial Reporting, Budgeting, Forecasting, or Financial Close. Experience gathering, documenting, and managing business requirements, process flows, functional specifications, user stories, and acceptance criteria. Experience managing or contributing to product backlogs, roadmap priorities, sprint planning, backlog refinement, UAT, and release readiness. Experience working with ERP platforms such as PeopleSoft Financials, SAP S/4HANA, or comparable enterprise Finance systems. Experience analyzing current-state processes, designing future-state solutions, and driving measurable process improvement. Experience partnering with business stakeholders, technology teams, vendors, and implementation partners to deliver Finance systems enhancements. Preferred Skills/Experience Experience supporting large-scale ERP implementations, Finance transformation, SAP S/4HANA programs, cloud modernization, or enterprise system upgrades. Knowledge of Finance data warehousing, data integration, semantic layers, business intelligence, reporting modernization, or analytics platforms. Experience defining Finance data quality rules, reconciliation needs, validation logic, reporting requirements, and business acceptance criteria. Familiarity with SOX-aware requirements, audit controls, change control, release governance, and data integrity practices. Experience with Enterprise Performance Management tools, including Oracle Essbase or similar budgeting, planning, forecasting, and management reporting platforms. Experience in healthcare, oncology, provider networks, life sciences, or other regulated environments. Strong facilitation, communication, stakeholder management, and executive-facing presentation skills. Travel, Work Environment and Physical Requirements Primary location: Houston, TX; secondary location: Dallas, TX. This is a standard professional office/computer-based role requiring frequent use of business systems, collaboration tools, and virtual or in-person stakeholder meetings. We are proud to offer a competitive compensation package at McKesson as part of our Total Rewards. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy, and pay will always be compliant with any applicable regulations. In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered. For more information regarding benefits at McKesson, please click here. Our Base Pay Range for this position $111,100 - $185,100 McKesson has become aware of online recruiting-related scams in which individuals who are not affiliated with or authorized by McKesson are using McKesson's (or affiliated entities, like CoverMyMeds or RxCrossroads) name in fraudulent emails, job postings or social media messages. In light of these scams, please bear the following in mind: McKesson Talent Advisors will never solicit money or credit card information in connection with a McKesson job application. McKesson Talent Advisors do not communicate with candidates via online chatrooms or using email accounts such as Gmail or Hotmail. Note that McKesson does rely on a virtual assistant (Gia) for certain recruiting-related communications with candidates. McKesson job postings are posted on our career site: . McKesson is an Equal Opportunity Employer McKesson provides equal employment opportunities to applicants and employees, without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, age, genetic information, or any other legally protected category. For additional information on McKesson's full Equal Employment Opportunity policies, visit our Equal Employment Opportunity page. McKesson is committed to being an Equal Employment Opportunity Employer and offers opportunities to all job seekers including job seekers with disabilities. If you need a reasonable accommodation to assist with your job search or application for employment, please contact us by sending an email to (United States) or (Canada) . Resumes or CVs submitted to this email box will not be accepted. Join us at McKesson!

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve - we care. What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow's health today, we want to hear from you. The McKesson Pentest Team is seeking a Penetration Testing Engineer to help support and scale McKesson's Continuous Adversarial Testing (CART) program and strengthen the security posture of our enterprise application ecosystem. This role provides technical support for offensive security programs, focusing on AI-enabled security testing, web application penetration testing, cloud security assessments, vulnerability validation, and adversarial testing across large-scale application portfolios. The individual in this role will partner with a pentest lead, engineering, product, cloud, and security teams to identify complex attack paths, validate threats, and drive remediation efforts that reduce business risk. The position will play a key role in executing autonomous security testing capabilities, integrating CART outputs into security operations, and advancing McKesson's offensive security assessments. This role will also help shape the future direction of AI-assisted security testing, automation, and modern offensive security methodologies across the enterprise. This is a hands-on technical role for someone who can support the development of a new security program while also performing advanced technical testing, validating AI-generated findings, solving operational challenges, and supporting the long-term direction of McKesson's offensive security capabilities. What You'll Do Work closely with a Lead Pentest Engineer to Implement McKesson's Continuous Adversarial Testing program across large application portfolios. Support and help shape the first iteration of the CART operating model. Execute and refine repeatable onboarding processes covering application context, test accounts, authentication, authorization roles, test data, rate limits, WAF coordination, exclusions, maintenance windows, and emergency stop procedures. Perform human-in-the-loop reviewing, reproducing, validating, prioritizing, and communicating findings generated by autonomous testing platforms. Support the execution of continuous AI assisted penetration tests across high-priority enterprise web applications, including application onboarding, test orchestration, execution oversight, findings validation, and remediation coordination. Implement integrations between CART platforms and vulnerability management, engineering, reporting, and remediation workflows. Conduct AI-enabled web application, API, and cloud security assessments across enterprise environments. Perform penetration testing, adversarial assessments, and vulnerability validation activities against internally developed and third-party applications. Evaluate emerging autonomous security testing capabilities and recommend changes to CART strategy, tooling, and service delivery. Contribute to program documentation including; playbooks, runbooks, technical standards, training materials. Leverage automation and AI-assisted security tooling to scale testing coverage and improve assessment efficiency. Identify and validate complex attack paths involving authentication weaknesses, authorization flaws, business logic vulnerabilities, and multi-stage exploitation scenarios. Evaluate REST APIs, GraphQL APIs, cloud-native architectures, and modern authentication technologies. Partner with engineering teams to explain findings, prioritize remediation efforts, and validate fixes through retesting. Develop and maintain testing methodologies, automation workflows, and security assessment procedures. Contribute to incident investigations, threat modeling activities, and continuous security improvement initiatives. Basic Requirements 4+ years of cybersecurity, application security, penetration testing, offensive security, or related experience. Bachelor's degree or equivalent combination of education and experience. Experience performing web application and API penetration testing. Experience validating security vulnerabilities, assessing exploitability, and distinguishing actionable findings from false positives. Experience assessing enterprise applications utilizing REST APIs, GraphQL APIs, authentication systems, and cloud-native technologies. Working knowledge of AWS, Azure, or Google Cloud Platform (GCP) security concepts. Experience documenting technical findings and communicating remediation guidance to engineering teams. Hands-on experience with Burp Suite Professional, Nuclei, Nmap, Metasploit, Postman, and Kali Linux tools. Preferred Skills/Experience Experience leveraging AI-assisted security tools and security automation platforms. Experience implementing, operating, or scaling continuous security testing, attack simulation, breach and attack simulation, or automated offensive security capabilities. Experience evaluating, validating, and triaging findings from automated or AI-assisted security testing platforms. Experience assessing AI-enabled applications, agent-based systems, LLM integrations, or AI security risks. Familiarity with DevSecOps, CI/CD security controls, and secure software development practices. Knowledge of OWASP Top 10, API Security Top 10, threat modeling, and secure design principles. Experience conducting red team, adversarial simulation, or attack path validation exercises. Knowledge of cloud security architecture and containerized environments. Experience performing cloud security assessments in AWS, Azure, and GCP environments. Experience creating custom security testing scripts and automation workflows. Experience developing proof-of-concept exploits and adversary emulation scenarios. Familiarity with security control validation and compliance frameworks. Experience mentoring engineers and contributing to security program maturity. Experience supporting regulated industries such as healthcare, finance, or other highly regulated environments. Relevant certifications such as OSCP, OSWE, OSWA, OSAI, HTB CWES, HTB CWEE, OSEP, GPEN, GWAPT or equivalent. Travel / Work Environment / Physical Requirements Limited travel may be required based on business needs. Hyrbid, two days a week in the office. We are proud to offer a competitive compensation package at McKesson as part of our Total Rewards. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy, and pay will always be compliant with any applicable regulations. In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered. For more information regarding benefits at McKesson, please click here. Our Base Pay Range for this position $103,900 - $173,100 McKesson has become aware of online recruiting-related scams in which individuals who are not affiliated with or authorized by McKesson are using McKesson's (or affiliated entities, like CoverMyMeds or RxCrossroads) name in fraudulent emails, job postings or social media messages. In light of these scams, please bear the following in mind: McKesson Talent Advisors will never solicit money or credit card information in connection with a McKesson job application. McKesson Talent Advisors do not communicate with candidates via online chatrooms or using email accounts such as Gmail or Hotmail. Note that McKesson does rely on a virtual assistant (Gia) for certain recruiting-related communications with candidates. McKesson job postings are posted on our career site: . McKesson is an Equal Opportunity Employer McKesson provides equal employment opportunities to applicants and employees, without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, age, genetic information, or any other legally protected category. For additional information on McKesson's full Equal Employment Opportunity policies, visit our Equal Employment Opportunity page. McKesson is committed to being an Equal Employment Opportunity Employer and offers opportunities to all job seekers including job seekers with disabilities. If you need a reasonable accommodation to assist with your job search or application for employment, please contact us by sending an email to (United States) or (Canada) . Resumes or CVs submitted to this email box will not be accepted. Join us at McKesson!

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve - we care. What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow's health today, we want to hear from you. Position Summary The Endpoint User Computing Technical Product Manager owns the strategy, roadmap, lifecycle, adoption, and business outcomes for a portfolio of digital workplace products. The portfolio may include endpoint devices, Chrome Enterprise, Google Workspace, collaboration services, mobile experiences, virtual application delivery, endpoint management, secure access, employee productivity, and supporting workplace technologies. This position serves as the primary connection between employees, business stakeholders, architecture, engineering, operations, cybersecurity, service management, change management, finance, procurement, and strategic vendors. The Technical Product Manager converts workforce needs and technology opportunities into a prioritized product roadmap and ensures that products deliver measurable value, security, reliability, usability, and cost effectiveness. As a P4 Senior individual contributor, this role independently manages complex products, leads cross-functional prioritization, makes recommendations based on data and customer insight, and influences delivery across multiple teams without relying on direct organizational authority. Key Responsibilities Own and evolve the vision, strategy, value proposition, roadmap, and lifecycle for assigned endpoint and digital workplace products. Manage a product portfolio that may include Chromebooks, Windows and macOS devices, mobile devices, Google Workspace, Chrome Enterprise, endpoint management, secure browser, virtual applications, collaboration, printing, conferencing, and employee-access experiences. Gather and synthesize employee, business, operational, security, and technical requirements into product capabilities, outcomes, and roadmap priorities. Conduct customer research through interviews, surveys, telemetry, support trends, adoption data, and stakeholder feedback. Maintain the product roadmap, backlog, release plan, dependencies, risks, decisions, and measurable acceptance criteria. Prioritize capabilities using business value, employee impact, risk reduction, regulatory requirements, technical feasibility, lifecycle needs, and cost. Partner with the Endpoint User Computing Architect to ensure product direction aligns with target architecture, standards, security guardrails, and long-term technology strategy. Partner with engineering and operations teams to convert product outcomes into epics, features, user stories, technical requirements, and release plans. Define and monitor product KPIs covering adoption, experience, reliability, performance, service quality, support demand, security, cost, and business value. Manage product performance throughout its lifecycle, including introduction, adoption, enhancement, maintenance, vendor transition, and retirement. Ensure product plans address cybersecurity, privacy, accessibility, records management, audit, resiliency, and regulatory requirements. Lead stakeholder reviews, roadmap discussions, prioritization decisions, product demonstrations, release-readiness reviews, and retrospectives. Manage cross-product dependencies and coordinate with identity, network, cybersecurity, cloud, application, service desk, workplace, and business teams. Develop business cases and investment recommendations for new capabilities, renewals, migrations, modernization, and technical-debt remediation. Maintain cost transparency and help manage product budgets, forecasts, licensing, vendor commitments, and consumption. Manage strategic vendor relationships, performance commitments, roadmaps, escalations, and product-development opportunities. Lead product adoption and change activities in partnership with communications, training, support, and organizational-change teams. Use data and feedback to drive continuous improvement and ensure that product decisions remain centered on employee and business outcomes. Communicate product status, risks, value, dependencies, and decisions to technical, operational, and senior business stakeholders. Minimum Qualifications Bachelor's degree in information technology, computer science, business, engineering, product management, or a related discipline, or equivalent practical experience. Typically seven or more years of relevant professional experience, including technical product management, digital workplace, endpoint computing, collaboration technology, service management, or related fields. Demonstrated experience owning strategy, roadmaps, backlogs, releases, adoption, and lifecycle outcomes for complex enterprise technology products. Strong understanding of endpoint and digital workplace technologies, including device management, identity, collaboration, productivity, secure access, support, and employee experience. Experience working with Google Workspace, Chrome Enterprise, Chromebooks, or comparable enterprise productivity and endpoint platforms. Ability to translate business and employee needs into product outcomes, requirements, user stories, acceptance criteria, and prioritized delivery plans. Experience using quantitative and qualitative data to evaluate product adoption, service performance, customer experience, risk, and value. Understanding of Agile product delivery, backlog management, release planning, product discovery, and continuous improvement. Experience working with architecture, engineering, operations, cybersecurity, procurement, finance, service desk, and vendor teams. Strong stakeholder-management and communication skills, including negotiating trade-offs and presenting recommendations to senior leaders. Ability to manage multiple products, dependencies, and competing priorities in a complex enterprise environment. Preferred Qualifications Experience managing Google Workspace, Chrome Enterprise, endpoint, collaboration, or employee-experience products. Experience with Google Admin Console, Google Workspace reporting, Chrome device management, Gmail, Calendar, Drive, Meet, Chat, and associated security controls. Experience with Windows, macOS, mobile-device management, endpoint security, virtual applications, or identity platforms. Experience with Okta, GCP, endpoint-management platforms, service-management platforms, analytics, or digital-experience monitoring. Product management certification, Pragmatic Institute training, CSPO, SAFe Product Owner/Product Manager, or comparable credential. ITIL Foundation certification. Experience managing vendor contracts, licensing, product budgets, forecasts, and technology business cases. Experience supporting enterprise transformation, platform migration, organizational separation, or coexistence between productivity ecosystems. Experience in healthcare, regulated, or audit-sensitive environments. Success Measures Product roadmap execution and delivery of agreed business outcomes. User adoption, satisfaction, productivity, and digital employee-experience improvements. Product reliability, supportability, security, compliance, and service-performance results. Reduction in avoidable support demand, fragmented tools, technical debt, and duplicative capabilities. Transparent product cost, licensing utilization, vendor performance, and realized value. Effective coordination of architecture, engineering, operations, security, and business stakeholders. About MMS McKesson Medical-Surgical (MMS), which is expected to become Wellverse in early 2027, is a subsidiary and publicly reported segment of the McKesson Corporation. MMS distributes medical-surgical supplies, pharmaceuticals, diagnostic equipment and supplies, along with other solutions and services to virtually every type of healthcare setting and provider outside of the traditional hospital. These markets - often referred to as Alternate Care or Non-Acute Care - include physician offices, surgery centers, long-term care providers, laboratories, home health and hospice agencies, health systems, government facilities and online marketplaces and retailers. Alternate Care markets are growing rapidly, and MMS is proud to be a leader in this space. With a team of approximately 8,000 employees, a network of 15 distribution centers and approximately 900 delivery vehicles, we collaborate with more than 2,200 leading manufacturers and serve over 200,000 customer accounts across the U.S. Our catalog includes more than 270,000 SKUs of branded and private-label medical-surgical products - from bandages to specialty pharmaceuticals and COVID-19 tests. We are proud to offer a competitive compensation package at McKesson as part of our Total Rewards. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy, and pay will always be compliant with any applicable regulations. In addition to base pay . click apply for full job details

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve - we care. What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow's health today, we want to hear from you. Position Summary The Endpoint User Computing Technical Product Manager owns the strategy, roadmap, lifecycle, adoption, and business outcomes for a portfolio of digital workplace products. The portfolio may include endpoint devices, Chrome Enterprise, Google Workspace, collaboration services, mobile experiences, virtual application delivery, endpoint management, secure access, employee productivity, and supporting workplace technologies. This position serves as the primary connection between employees, business stakeholders, architecture, engineering, operations, cybersecurity, service management, change management, finance, procurement, and strategic vendors. The Technical Product Manager converts workforce needs and technology opportunities into a prioritized product roadmap and ensures that products deliver measurable value, security, reliability, usability, and cost effectiveness. As a P4 Senior individual contributor, this role independently manages complex products, leads cross-functional prioritization, makes recommendations based on data and customer insight, and influences delivery across multiple teams without relying on direct organizational authority. Key Responsibilities Own and evolve the vision, strategy, value proposition, roadmap, and lifecycle for assigned endpoint and digital workplace products. Manage a product portfolio that may include Chromebooks, Windows and macOS devices, mobile devices, Google Workspace, Chrome Enterprise, endpoint management, secure browser, virtual applications, collaboration, printing, conferencing, and employee-access experiences. Gather and synthesize employee, business, operational, security, and technical requirements into product capabilities, outcomes, and roadmap priorities. Conduct customer research through interviews, surveys, telemetry, support trends, adoption data, and stakeholder feedback. Maintain the product roadmap, backlog, release plan, dependencies, risks, decisions, and measurable acceptance criteria. Prioritize capabilities using business value, employee impact, risk reduction, regulatory requirements, technical feasibility, lifecycle needs, and cost. Partner with the Endpoint User Computing Architect to ensure product direction aligns with target architecture, standards, security guardrails, and long-term technology strategy. Partner with engineering and operations teams to convert product outcomes into epics, features, user stories, technical requirements, and release plans. Define and monitor product KPIs covering adoption, experience, reliability, performance, service quality, support demand, security, cost, and business value. Manage product performance throughout its lifecycle, including introduction, adoption, enhancement, maintenance, vendor transition, and retirement. Ensure product plans address cybersecurity, privacy, accessibility, records management, audit, resiliency, and regulatory requirements. Lead stakeholder reviews, roadmap discussions, prioritization decisions, product demonstrations, release-readiness reviews, and retrospectives. Manage cross-product dependencies and coordinate with identity, network, cybersecurity, cloud, application, service desk, workplace, and business teams. Develop business cases and investment recommendations for new capabilities, renewals, migrations, modernization, and technical-debt remediation. Maintain cost transparency and help manage product budgets, forecasts, licensing, vendor commitments, and consumption. Manage strategic vendor relationships, performance commitments, roadmaps, escalations, and product-development opportunities. Lead product adoption and change activities in partnership with communications, training, support, and organizational-change teams. Use data and feedback to drive continuous improvement and ensure that product decisions remain centered on employee and business outcomes. Communicate product status, risks, value, dependencies, and decisions to technical, operational, and senior business stakeholders. Minimum Qualifications Bachelor's degree in information technology, computer science, business, engineering, product management, or a related discipline, or equivalent practical experience. Typically seven or more years of relevant professional experience, including technical product management, digital workplace, endpoint computing, collaboration technology, service management, or related fields. Demonstrated experience owning strategy, roadmaps, backlogs, releases, adoption, and lifecycle outcomes for complex enterprise technology products. Strong understanding of endpoint and digital workplace technologies, including device management, identity, collaboration, productivity, secure access, support, and employee experience. Experience working with Google Workspace, Chrome Enterprise, Chromebooks, or comparable enterprise productivity and endpoint platforms. Ability to translate business and employee needs into product outcomes, requirements, user stories, acceptance criteria, and prioritized delivery plans. Experience using quantitative and qualitative data to evaluate product adoption, service performance, customer experience, risk, and value. Understanding of Agile product delivery, backlog management, release planning, product discovery, and continuous improvement. Experience working with architecture, engineering, operations, cybersecurity, procurement, finance, service desk, and vendor teams. Strong stakeholder-management and communication skills, including negotiating trade-offs and presenting recommendations to senior leaders. Ability to manage multiple products, dependencies, and competing priorities in a complex enterprise environment. Preferred Qualifications Experience managing Google Workspace, Chrome Enterprise, endpoint, collaboration, or employee-experience products. Experience with Google Admin Console, Google Workspace reporting, Chrome device management, Gmail, Calendar, Drive, Meet, Chat, and associated security controls. Experience with Windows, macOS, mobile-device management, endpoint security, virtual applications, or identity platforms. Experience with Okta, GCP, endpoint-management platforms, service-management platforms, analytics, or digital-experience monitoring. Product management certification, Pragmatic Institute training, CSPO, SAFe Product Owner/Product Manager, or comparable credential. ITIL Foundation certification. Experience managing vendor contracts, licensing, product budgets, forecasts, and technology business cases. Experience supporting enterprise transformation, platform migration, organizational separation, or coexistence between productivity ecosystems. Experience in healthcare, regulated, or audit-sensitive environments. Success Measures Product roadmap execution and delivery of agreed business outcomes. User adoption, satisfaction, productivity, and digital employee-experience improvements. Product reliability, supportability, security, compliance, and service-performance results. Reduction in avoidable support demand, fragmented tools, technical debt, and duplicative capabilities. Transparent product cost, licensing utilization, vendor performance, and realized value. Effective coordination of architecture, engineering, operations, security, and business stakeholders. About MMS McKesson Medical-Surgical (MMS), which is expected to become Wellverse in early 2027, is a subsidiary and publicly reported segment of the McKesson Corporation. MMS distributes medical-surgical supplies, pharmaceuticals, diagnostic equipment and supplies, along with other solutions and services to virtually every type of healthcare setting and provider outside of the traditional hospital. These markets - often referred to as Alternate Care or Non-Acute Care - include physician offices, surgery centers, long-term care providers, laboratories, home health and hospice agencies, health systems, government facilities and online marketplaces and retailers. Alternate Care markets are growing rapidly, and MMS is proud to be a leader in this space. With a team of approximately 8,000 employees, a network of 15 distribution centers and approximately 900 delivery vehicles, we collaborate with more than 2,200 leading manufacturers and serve over 200,000 customer accounts across the U.S. Our catalog includes more than 270,000 SKUs of branded and private-label medical-surgical products - from bandages to specialty pharmaceuticals and COVID-19 tests. We are proud to offer a competitive compensation package at McKesson as part of our Total Rewards. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy, and pay will always be compliant with any applicable regulations. In addition to base pay . click apply for full job details

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve - we care. What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow's health today, we want to hear from you. About the Team Our AI Enablement team drives enterprise-wide adoption of generative AI, spanning platform engineering, governance, and hands-on delivery of AI-powered products and internal tooling. The team builds and operates the infrastructure, integrations, and knowledge systems that let engineering and business teams safely adopt large language models at scale. The Lead AI Engineer joins as the senior technical authority on this team, setting the architectural direction that Senior and Associate AI Engineers build against. Position Summary The Lead AI Engineer provides technical leadership and architecture ownership for the company's AI platform and its embedded delivery initiatives, operating one level above the Senior AI Engineer role. This person owns the technical design of agentic and LLM-powered systems built on large language model APIs, including retrieval-augmented generation (RAG), tool/connector integration, and evaluation/governance tooling, in a highly regulated healthcare environment. The Lead AI Engineer sets architectural standards across AI-embedded product delivery, mentors Senior and Associate AI Engineers, and represents AI platform architecture to engineering leadership and Legal/Compliance/Privacy. Success is measured by the reliability, security, and scalability of the AI systems shipped, the rate at which Senior/Associate engineers adopt the architectural standards this role sets, and this role's influence on AI platform decisions across the organization. Key Responsibilities AI Architecture Leadership: Define the technical architecture and roadmap for LLM/agentic systems - model routing across cloud AI platforms, connector/integration patterns, RAG pipelines, and prompt/evaluation frameworks. Solution Design & Governance: Lead architecture reviews for new AI capabilities and ensure designs meet enterprise security, privacy, and data-provenance requirements. Platform Ownership: Drive the technical design of shared AI platform capabilities, including knowledge-retrieval systems, citation/traceability of AI-generated outputs, and permission-aware access to data. Hands-On Delivery: Personally architect and build high-complexity components on priority AI delivery initiatives where a working system, not just a design doc, is the deliverable. Technical Mentorship: Set coding, architecture, and evaluation standards for Senior and Associate AI Engineers; run design reviews and pair on complex agentic workflows. LLMOps & Responsible AI: Establish secure, observable, and cost-attributed AI operations - usage/spend attribution, abuse monitoring, model evaluation, and rollback strategy - for production LLM systems. Cross-Functional Architecture: Partner with engineering managers, product, platform, and Legal/Compliance to align AI architecture decisions with delivery timelines and enterprise standards. Vendor & Model Strategy: Evaluate foundation model providers and AI tooling vendors; make build-vs-buy and model-selection recommendations. Compliance & Risk: Ensure AI systems handling protected health information (PHI) meet regulatory and enterprise governance requirements. Organizational Impact: Represent AI architecture in cross-company forums and influence enterprise-wide AI platform direction. Priority will be given to candidates who reside in the Columbus, OH metropolitan area. We are unable to provide sponsorship for this role, presently or in the future. Minimum Requirements Bachelor's degree or equivalent experience; typically 8+ years of software engineering experience, including 3+ years focused on AI/ML, LLM, or NLP systems in production. Fewer years required with a relevant Master's or Doctorate. Critical Skills One level of demonstrated technical leadership above a Senior AI Engineer - e.g., owning architecture for a team or platform area, not just a single feature. Deep, hands-on expertise building production LLM applications: prompt engineering, RAG/GraphRAG, agentic workflows, tool use, and evaluation harnesses. Experience with commercial large language model APIs (e.g., Anthropic, OpenAI) and tool-integration protocols such as Model Context Protocol (MCP). Strong software engineering fundamentals: Python and/or Java, REST APIs, event-driven architecture, microservices, and cloud-native design (Azure preferred; AWS/GCP acceptable). Experience with vector/graph retrieval systems, embeddings, and knowledge-base architectures at production scale. Working knowledge of LLMOps/MLOps: usage attribution, cost/spend monitoring, abuse detection, and model evaluation pipelines. Ability to set architectural standards and mentor other engineers through design review and pairing, not just documentation. Familiarity with regulated/healthcare data environments and AI governance frameworks (model risk review, connector approval tiers, PHI handling) is a plus. Preferred Qualifications Advanced degree (M.S. or higher) in Computer Science, AI/ML, or a related technical field. Prior experience leading AI/ML platform or applied-AI teams inside healthcare IT or another highly regulated industry. Experience modernizing legacy systems toward AI-embedded workflows (agent-assisted development, AI-powered risk scoring, AI-driven automation). Experience with Confluence/Jira-based engineering governance and enterprise architecture review boards. Additional Skills Strong awareness of the fast-moving GenAI/agentic landscape and a demonstrated habit of continuous learning. Experience managing relationships with AI tooling vendors and model providers. Clear written and verbal communication for both technical and executive audiences We are proud to offer a competitive compensation package at McKesson as part of our Total Rewards. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy, and pay will always be compliant with any applicable regulations. In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered. For more information regarding benefits at McKesson, please click here. Our Base Pay Range for this position $155,300 - $258,800 McKesson has become aware of online recruiting-related scams in which individuals who are not affiliated with or authorized by McKesson are using McKesson's (or affiliated entities, like CoverMyMeds or RxCrossroads) name in fraudulent emails, job postings or social media messages. In light of these scams, please bear the following in mind: McKesson Talent Advisors will never solicit money or credit card information in connection with a McKesson job application. McKesson Talent Advisors do not communicate with candidates via online chatrooms or using email accounts such as Gmail or Hotmail. Note that McKesson does rely on a virtual assistant (Gia) for certain recruiting-related communications with candidates. McKesson job postings are posted on our career site: . McKesson is an Equal Opportunity Employer McKesson provides equal employment opportunities to applicants and employees, without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, age, genetic information, or any other legally protected category. For additional information on McKesson's full Equal Employment Opportunity policies, visit our Equal Employment Opportunity page. McKesson is committed to being an Equal Employment Opportunity Employer and offers opportunities to all job seekers including job seekers with disabilities. If you need a reasonable accommodation to assist with your job search or application for employment, please contact us by sending an email to (United States) or (Canada) . Resumes or CVs submitted to this email box will not be accepted. Join us at McKesson!

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve - we care. What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow's health today, we want to hear from you. As a Senior Software Engineer, Identity & Access Management, you will build and modernize the authentication and authorization capabilities that protect McKesson's healthcare technology platforms. This is a hands-on software engineering role focused on modern identity architecture, secure application development, and infrastructure automation. You will help migrate applications and identity capabilities from legacy authentication systems to modern identity platforms such as Okta while engineering identity infrastructure through Infrastructure as Code (IaC), including Terraform. You will own complex identity capabilities from technical design through implementation, testing, deployment, and production support, while helping establish scalable patterns that other engineering teams can adopt. What You'll Do Design, develop, test, and deploy secure authentication and authorization capabilities, including SSO, MFA, federation, provisioning, and identity lifecycle integrations. Lead the technical migration of applications and user populations from legacy authentication and directory systems to Okta or comparable modern identity platforms. Build and maintain identity infrastructure using Terraform and Infrastructure as Code, establishing reusable, version-controlled patterns for identity configuration and deployment. Design and implement identity integrations using OAuth 2.0, OpenID Connect (OIDC), SAML, and SCIM. Develop secure services, APIs, and integrations that support authentication, authorization, provisioning, and identity workflows. Partner with application engineers, architects, product owners, and security teams to translate identity and access requirements into scalable technical solutions. Integrate identity configuration and security controls into CI/CD pipelines, including automated testing and deployment practices. Review code and technical designs with particular attention to authentication and authorization correctness, secrets management, session handling, and secure engineering practices. Diagnose complex production identity issues involving tokens, sessions, federation, provisioning, application integrations, and access policies. Contribute to the architecture and roadmap for consolidating identity capabilities and retiring legacy authentication technologies. Mentor engineers on secure software development, identity patterns, IaC practices, and authentication architecture. Create clear technical documentation, identity-flow diagrams, deployment patterns, and operational runbooks. Partner with security, risk, and compliance teams to build identity solutions appropriate for a regulated healthcare environment. Minimum Qualifications Degree or equivalent and typically requires 7+ years of relevant experience Critical Skills 5+ years of professional software engineering experience, including ownership of production applications, services, platforms, or distributed systems. 2+ years of hands-on identity, authentication, authorization, or security engineering experience. Strong programming experience in at least one language such as Java, C#, Python, or a comparable object-oriented/backend language. Production experience integrating applications with a modern identity provider such as Okta, Microsoft Entra ID, Auth0, Ping Identity, or a comparable platform. Hands-on experience with OAuth 2.0, OpenID Connect (OIDC), and SAML in production systems. Experience modernizing or migrating applications from legacy authentication technologies such as LDAP, Active Directory, SiteMinder, or custom authentication services. Hands-on experience using Terraform to provision and manage infrastructure or platform configuration as code, including reusable modules, source control, review, testing, and deployment practices. Experience building or supporting REST APIs, microservices, or distributed applications in security-sensitive production environments. Experience with modern CI/CD and automated software-delivery practices. Experience implementing secure engineering practices involving authentication, authorization, secrets, sessions, or access controls. Preferred Qualifications Deep hands-on experience with Okta, including SSO, MFA, lifecycle management, provisioning, policies, and application integrations. Experience managing Okta configuration through Terraform. Experience with SCIM-based provisioning and identity lifecycle automation. Experience with AWS, Azure, or GCP. Experience with Docker, Kubernetes, or other cloud-native technologies. Experience working with relational or NoSQL persistence technologies used in distributed applications. Experience with identity-related threat modeling, Zero Trust, least-privilege, or policy-based access controls. Experience building software in healthcare, financial services, insurance, life sciences, or another regulated environment. Familiarity with regulatory or security frameworks such as HIPAA, SOC 2, or comparable controls. Okta certification or equivalent identity-platform certification. What Success Looks Like In this role, you will: Deliver secure, production-ready identity capabilities that engineering teams can reliably integrate with. Increase the use of repeatable, version-controlled Terraform/IaC patterns for identity configuration rather than relying on manual platform administration. Successfully move applications and identity capabilities away from legacy authentication technologies without compromising application availability or access. Establish reusable authentication, authorization, federation, and provisioning patterns that reduce one-off identity implementations. Improve the reliability, maintainability, and security of identity integrations through automated testing, CI/CD, documentation, and operational standards. Become a technical resource for engineers working through complex authentication and authorization problems We are proud to offer a competitive compensation package at McKesson as part of our Total Rewards. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy, and pay will always be compliant with any applicable regulations. In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered. For more information regarding benefits at McKesson, please click here. Our Base Pay Range for this position $131,000 - $218,300 McKesson has become aware of online recruiting-related scams in which individuals who are not affiliated with or authorized by McKesson are using McKesson's (or affiliated entities, like CoverMyMeds or RxCrossroads) name in fraudulent emails, job postings or social media messages. In light of these scams, please bear the following in mind: McKesson Talent Advisors will never solicit money or credit card information in connection with a McKesson job application. McKesson Talent Advisors do not communicate with candidates via online chatrooms or using email accounts such as Gmail or Hotmail. Note that McKesson does rely on a virtual assistant (Gia) for certain recruiting-related communications with candidates. McKesson job postings are posted on our career site: . McKesson is an Equal Opportunity Employer McKesson provides equal employment opportunities to applicants and employees, without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, age, genetic information, or any other legally protected category. For additional information on McKesson's full Equal Employment Opportunity policies, visit our Equal Employment Opportunity page. McKesson is committed to being an Equal Employment Opportunity Employer and offers opportunities to all job seekers including job seekers with disabilities. If you need a reasonable accommodation to assist with your job search or application for employment, please contact us by sending an email to (United States) or (Canada) . Resumes or CVs submitted to this email box will not be accepted. Join us at McKesson!

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve - we care. What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow's health today, we want to hear from you. Job Summary The Network Systems Engineer is responsible for the administration, support, maintenance, and continuous improvement of enterprise network and security infrastructure within a highly regulated environment. This role serves as an experienced technical contributor supporting production network operations, security controls, compliance requirements, and infrastructure reliability. The position requires strong hands-on expertise with Palo Alto and Cisco firewall technologies, along with experience supporting enterprise networking, load balancing, cloud connectivity, and operational infrastructure services. The engineer will work closely with Systems Administration, Senior Systems Engineering, Senior Network Engineering, Cybersecurity, and Governance, Risk, and Compliance (GRC) teams to ensure the availability, security, and compliance of critical infrastructure supporting regulated business operations. The ideal candidate is an experienced network professional who can independently support complex production environments, maintain accurate technical documentation, contribute to security and compliance activities, and help protect sensitive information including PII and PHI. Key Responsibilities Network Security Administration Administer and support Palo Alto Networks firewall platforms. Administer and support Cisco firewall technologies. Implement approved firewall rules, VPN configurations, NAT policies, and network segmentation requirements. Assist with vulnerability remediation and security hardening activities. Participate in security incident investigation and resolution efforts. Support implementation of security controls and approved security baselines. Network Infrastructure Operations Support Cisco switching and routing environments. Troubleshoot and resolve network connectivity and performance issues. Support network infrastructure upgrades and lifecycle management activities. Participate in change management processes and maintenance activities. Perform root cause analysis on network service incidents. Load Balancing and Application Delivery Support F5 load balancing technologies. Maintain virtual servers, traffic management policies, SSL configurations, and application delivery services. Partner with application support teams to maintain highly available services. Operational Infrastructure Support Apply patches, firmware updates, hotfixes, and security updates. Perform user administration and access management activities. Execute operational maintenance procedures and validation activities. Support disaster recovery and business continuity testing activities. Maintain operational runbooks and support procedures. Compliance and Regulatory Support Support infrastructure operating within a federal, healthcare, or otherwise highly regulated environment. Participate in audit readiness, evidence collection, and remediation activities. Assist with maintenance of technical controls aligned to regulatory and security requirements. Support protection of sensitive information including PII and PHI. Follow established configuration management and change control processes. Monitoring and Observability Utilize monitoring and observability platforms to identify service and infrastructure issues. Review network health, capacity, availability, and performance metrics. Support operational reporting and dashboard development. Participate in continuous service improvement initiatives. Documentation and Collaboration Develop and maintain network diagrams, technical procedures, standards documentation, and operational guides. Maintain accurate and audit-ready documentation. Collaborate with Systems Administration, Senior Systems Engineering, Senior Network Engineering, Cybersecurity, and GRC teams. Participate in incident, change, and problem management processes. Minimum Requirements Education Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or related field, or equivalent experience. Experience Typically requires 4+ years of relevant network engineering, network administration, or network security experience. Experience administering Palo Alto firewalls. Experience administering Cisco firewalls. Experience supporting Cisco switching environments. Experience supporting enterprise production infrastructure. Experience working in regulated or compliance-driven environments. Experience performing operational maintenance activities including patching, upgrades, and user administration. Technical Knowledge TCP/IP networking Routing and switching VPN technologies Network security principles DNS and related network services High availability concepts Load balancing concepts Cloud networking fundamentals Monitoring and observability concepts Preferred Qualifications Experience supporting federal, healthcare, or other highly regulated environments. Familiarity with NIST SP 800-53 security controls. Familiarity with DISA STIG security configuration standards. Familiarity with HIPAA compliance requirements. Experience protecting regulated information including PII and PHI. Experience supporting audit and compliance activities. Experience with Azure, AWS, or hybrid cloud networking environments. Experience with automation technologies such as PowerShell, Python, or Ansible. Familiarity with vulnerability management processes and security remediation activities. Preferred Certifications Network CCNA CCNP Security Security+ Palo Alto PCNSA Palo Alto PCNSE CISSP Cloud Azure AZ-104 Azure AZ-700 AWS Certified Advanced Networking Service Management ITIL Foundation Critical Success Factors Strong troubleshooting and analytical abilities. Exceptional written and verbal communication skills. Outstanding documentation and organizational skills. Ability to independently manage operational responsibilities with limited supervision. Strong attention to detail in compliance-sensitive environments. Collaborative mindset and ability to work effectively across infrastructure, engineering, cybersecurity, and compliance teams. Commitment to operational excellence, security, and regulatory compliance. We are proud to offer a competitive compensation package at McKesson as part of our Total Rewards. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy, and pay will always be compliant with any applicable regulations. In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered. For more information regarding benefits at McKesson, please click here. Our Base Pay Range for this position $90,500 - $150,800 McKesson has become aware of online recruiting-related scams in which individuals who are not affiliated with or authorized by McKesson are using McKesson's (or affiliated entities, like CoverMyMeds or RxCrossroads) name in fraudulent emails, job postings or social media messages. In light of these scams, please bear the following in mind: McKesson Talent Advisors will never solicit money or credit card information in connection with a McKesson job application. McKesson Talent Advisors do not communicate with candidates via online chatrooms or using email accounts such as Gmail or Hotmail. Note that McKesson does rely on a virtual assistant (Gia) for certain recruiting-related communications with candidates. McKesson job postings are posted on our career site: . . click apply for full job details

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve - we care. What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow's health today, we want to hear from you. This role is a hybrid position. The selected candidate is expected to work on-site at our Las Colinas office a minimum of two (2) days per week, with the remaining days worked remotely. Specific in-office days may be designated based on team needs and business priorities. About the Role: The Sr. Technical Product Manager (TPM) is a strategic and execution-focused role that works is responsible for managing eCommerce Core Ordering digital products with a focus on; Regulatory & Compliance needs, and the Accounts Payable functionality. This individual works with engineering, design, and business teams, translating product vision into actionable technical requirements. Contributes to the product strategy and roadmap by identifying customer needs, business opportunities, and technical considerations within their area of ownership. This role also engages in identifying and driving the development of new, innovative products. The role demands deep technical acumen, strong analytical skills, and the ability to influence cross-functional teams without direct authority. Responsibilities include managing the product roadmap, authoring epics and user stories, guiding and interpreting market and user research, and overseeing product performance through data-driven insights. What You'll Do: Product Ownership & Execution Designs, develops and manages activities for a specific digital product from product definition and planning through production, release, and end of life. Owns the identification and management of specific features or components within a digital product. Translate business requirements into detailed technical requirements and/or specifications. Prioritize backlog items in collaboration with engineering and design. Drives technical product initiatives within their domain, guiding efforts from ideation and requirements definition through prototyping, validation, pilot execution, and scaled rollout. Ensures delivery excellence by aligning product execution with agile best practices, sprint goals, and release timelines, while proactively identifying and mitigating risks. Drives the execution and delivery of a digital product, platform, or key product area, supporting activities from discovery and planning through development, launch, adoption, and ongoing optimization. Technical Collaboration Work closely with engineering teams to ensure feasibility, scalability, and alignment with architectural standards. Managing Trade-off - balance system performance, technical debt, security risks, and delivery speed. Participate in sprint planning, standups, and retrospectives to promote on-time delivery. Understand APIs, data models, and system integrations to guide development. Work with engineering and testing teams to develop and apply A/B testing methodologies to validate best-in-class feature and functionality enhancement. Customer & Stakeholder Engagement Builds strong, trust-based relationships with internal and external stakeholders, including engineering, design, business units, customer success, and executive leadership, to ensure alignment on product goals and priorities. Interface with internal stakeholders (e.g., customer success, sales, support) to gather feedback and validate technical solutions. Regularly uses immediate customer feedback loops, incorporating customer & user feedback into the prioritization of current product feature expansion, and new product development. Support customer discovery and usability testing to inform product decisions. Data-Driven Decision Making Use real-time analytics tools to monitor product performance, identify issues, and propose improvements. Demonstrate measurable improvements in product reliability, scalability, and performance, as reflected in KPIs such as uptime, latency, error rates, and system throughput. Drives enhancements that improve user satisfaction, engagement, and retention, measured through NPS, CSAT, adoption rates, and usage analytics. Consistently delivers features and improvements on time and within scope, with minimal rework or technical debt, tracked through sprint velocity, cycle time, and release cadence. Documentation & Communication Create and maintain product documentation, including technical specs, release notes, and user guides. Communicate progress, risks, and dependencies to cross-functional teams. Develop and socialize product roadmaps, decision logs, and technical rationale to ensure transparency and alignment across teams. Facilitate knowledge transfer and continuity by documenting key product decisions, architectural trade-offs, and lessons learned for future reference and onboarding. Basic Requirements: Degree or equivalent and typically requires 7+ years of relevant experience. 7+ years in progressively advancing technical product management roles; less years required if has relevant Master's or Doctorate qualifications. 7+ years proven experience working with and influencing highly matrixed teams. Hands-on experience in health care industry and/or regulated environment is a plus. Demonstrated understanding of product technical product lifecycle management, agile methodologies, and digital transformation. Preferred Skills/Experience: 7+ years of experience building business cases. The following (or similar) certifications are optional but advantageous: Certified Product Manager (CPM); Scrum Master, SAFe, etc. Demonstrated ability to engage engineering, architecture, and data teams to evaluate technical trade-offs, influence solution design, and ensure feasibility of product strategies. Base understanding of modern digital architectures, APIs, cloud platforms, data ecosystems, and software development practices. Physical Requirements: Traditional Hybrid office environment. Commutability to Irving, TX is highly preferred. Candidates within a 50-mile radius of Irving, TX will be required to be onsite 2 days per week. McKesson complies with all applicable U.S. immigration laws and regulations. The Company does not provide employer support or sponsorship for any immigration related employment benefit for this role. Applicants must be currently authorized to work in the United States on a fulltime basis without the need for employer support or sponsorship now or in the future. This includes having the legal right to work in the United States without the need for McKesson support or sponsorship for any immigration related employment authorization (e.g., H1B, O1, E3, H1B1, TN, F1 OPT, F1 STEM OPT, F1 CPT, etc.) now or in the future. If you will require McKesson to provide immigration support or sponsorship now or in the future, you should not apply for this position. We are proud to offer a competitive compensation package at McKesson as part of our Total Rewards. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy, and pay will always be compliant with any applicable regulations. In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered. For more information regarding benefits at McKesson, please click here. Our Base Pay Range for this position $136,500 - $227,500 McKesson has become aware of online recruiting-related scams in which individuals who are not affiliated with or authorized by McKesson are using McKesson's (or affiliated entities, like CoverMyMeds or RxCrossroads) name in fraudulent emails, job postings or social media messages. In light of these scams, please bear the following in mind: McKesson Talent Advisors will never solicit money or credit card information in connection with a McKesson job application. McKesson Talent Advisors do not communicate with candidates via online chatrooms or using email accounts such as Gmail or Hotmail. Note that McKesson does rely on a virtual assistant (Gia) for certain recruiting-related communications with candidates. McKesson job postings are posted on our career site: . McKesson is an Equal Opportunity Employer McKesson provides equal employment opportunities to applicants and employees, without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, age, genetic information, or any other legally protected category. For additional information on McKesson's full Equal Employment Opportunity policies, visit our Equal Employment Opportunity page. . click apply for full job details