Lead End User Computer & Digital Experience Architect

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve – we care.

What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow’s health today, we want to hear from you.

Position Summary The Endpoint User Computing Architect is the lead technical authority responsible for defining and evolving the architecture for a secure, reliable, and modern digital workplace. This position establishes the target-state strategy, reference architectures, technical standards, and roadmaps for endpoint computing across ChromeOS, Google Workspace, Google Cloud Platform, mobile devices, virtual application delivery, identity, endpoint management, collaboration, productivity, and employee experience services. The Architect provides deep expertise in Google technologies, including Google Workspace, Chrome Enterprise, Google Admin Console, Google Cloud Platform, Google identity integrations, endpoint security, and device-management capabilities. The role translates business and employee-experience requirements into scalable architecture while ensuring security, compliance, operational resilience, cost effectiveness, and supportability. As a P5 Lead, this role operates with substantial autonomy, leads through influence, resolves complex cross-platform challenges, mentors engineers and architects, and guides technical decisions across product, security, infrastructure, operations, and business teams.

Key Responsibilities

• Define and maintain the target-state architecture and multiyear roadmap for endpoint computing and digital workplace capabilities.
• Establish reference architectures, patterns, standards, and technical guardrails for ChromeOS, Chromebooks, Windows, macOS, mobile devices, virtual applications, browsers, collaboration platforms, and productivity services.
• Serve as the lead architecture authority for Google Workspace and Chrome Enterprise, including Gmail, Calendar, Drive, Shared Drives, Meet, Chat, identity federation, application access, device policies, browser controls, and data-protection capabilities.
• Design integrations between Google Workspace, GCP, identity providers, endpoint-management platforms, security tools, service-management platforms, and enterprise applications.
• Define architectures for secure access from managed endpoints to applications and data hosted in GCP, SaaS platforms, partner environments, and legacy infrastructure.
• Lead architecture reviews for new endpoint capabilities, major migrations, acquisitions, divestitures, third-party integrations, and workplace transformation initiatives.
• Translate business, security, privacy, regulatory, and operational requirements into reusable technical standards and implementation guidance.
• Provide architectural direction for endpoint identity, authentication, device trust, zero-trust access, privileged administration, encryption, data loss prevention, logging, monitoring, vulnerability management, and threat protection.
• Evaluate emerging Google, endpoint, AI, automation, and employee-experience technologies and recommend adoption based on business value, risk, interoperability, and total cost.
• Identify architectural risks, technical debt, platform dependencies, and lifecycle concerns, then define practical remediation and modernization plans.
• Partner with Technical Product Managers to align product roadmaps, architecture strategy, investment priorities, and measurable employee outcomes.
• Partner with engineering and operations teams to ensure designs can be implemented, supported, monitored, and continuously improved.
• Guide proof-of-concept activities, design validation, performance testing, resiliency testing, and technical acceptance criteria.
• Maintain architecture decision records, diagrams, standards, patterns, and roadmap documentation.
• Mentor architects and engineers, perform critical reviews of technical deliverables, and raise architecture and engineering maturity across the organization.
• Communicate technical options, risks, costs, and trade-offs clearly to senior technology and business leaders.
• Lead vendor technical evaluations and ensure partner solutions align with architecture, security, interoperability, and service requirements.

Minimum Qualifications

• Bachelor's degree in computer science, information technology, engineering, information systems, or a related discipline, or equivalent practical experience.
• Typically 10 or more years of relevant technology experience, including significant experience in endpoint, infrastructure, workplace, or cloud architecture.
• Demonstrated architecture experience with enterprise-scale Google Workspace and Chrome Enterprise environments.
• Strong hands-on knowledge of Google Workspace administration, organizational units, groups, context-aware access, endpoint controls, Chrome policies, Gmail, Calendar, Drive, Meet, Chat, and collaboration governance.
• Strong understanding of GCP architecture and services relevant to endpoint access, identity, logging, automation, application delivery, security, networking, and integration.
• Experience designing endpoint solutions across ChromeOS and at least two of the following: Windows, macOS, Android, iOS, virtual desktop, or virtual application delivery.
• Experience with identity federation, SSO, MFA, device trust, lifecycle provisioning, directory synchronization, and role-based administration.
• Strong understanding of zero-trust architecture, endpoint security, data protection, secure browser, encryption, vulnerability management, and compliance controls.
• Experience defining reference architectures, technical standards, design patterns, roadmaps, and architecture decision records.
• Ability to lead highly complex initiatives involving multiple platforms, vendors, teams, and business functions.
• Strong communication skills with the ability to influence technical teams, product leaders, senior stakeholders, and external partners.
• Demonstrated ability to mentor technical professionals and lead through influence without direct management authority.

Preferred Qualifications

• Google Professional Cloud Architect certification.
• Google Professional Cloud Security Engineer certification.
• Google Workspace Administrator or Chrome Enterprise certifications.
• Experience with Google Workspace migrations, coexistence, merger, acquisition, or separation programs.
• Experience with Okta or comparable identity platforms.
• Experience with Google Endpoint Management, Chrome Enterprise, Workspace ONE, Microsoft Intune, Jamf, CrowdStrike, Zscaler, or comparable platforms.
• Experience with automation using APIs, scripting, infrastructure as code, or policy as code.
• Experience operating technology in healthcare, regulated, or audit-sensitive environments.
• Working knowledge of ITIL, Agile delivery, DevSecOps, service management, and product operating models.

Success Measures

• Adoption and reuse of endpoint reference architectures and standards.
• Reduction in unsupported designs, technical debt, and high-risk exceptions.
• Improved endpoint security, reliability, interoperability, and employee experience.
• Delivery of architecture roadmaps that align investments with business priorities.
• Effective architecture decision-making across Google Workspace, GCP, endpoint, identity, and security domains.
• Development of technical capability through mentoring and architecture community leadership.

About MMS

McKesson Medical-Surgical (MMS), which is expected to become Wellverse in early 2027, is a subsidiary and publicly reported segment of the McKesson Corporation. MMS distributes medical-surgical supplies, pharmaceuticals, diagnostic equipment and supplies, along with other solutions and services to virtually every type of healthcare setting and provider outside of the traditional hospital. These markets – often referred to as Alternate Care or Non-Acute Care – include physician offices, surgery centers, long-term care providers, laboratories, home health and hospice agencies, health systems, government facilities and online marketplaces and retailers.

Alternate Care markets are growing rapidly, and MMS is proud to be a leader in this space. With a team of approximately 8,000 employees, a network of 15 distribution centers and approximately 900 delivery vehicles, we collaborate with more than 2,200 leading manufacturers and serve over 200,000 customer accounts across the U.S. Our catalog includes more than 270,000 SKUs of branded and private-label medical-surgical products – from bandages to specialty pharmaceuticals and COVID-19 tests.

We are proud to offer a competitive compensation package at McKesson as part of our Total Rewards. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy, and pay will always be compliant with any applicable regulations. In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered. For more information regarding benefits at McKesson, please click here.

Our Base Pay Range for this position

$150,800 - $251,300

McKesson has become aware of online recruiting-related scams in which individuals who are not affiliated with or authorized by McKesson are using McKesson’s (or affiliated entities, like CoverMyMeds or RxCrossroads) name in fraudulent emails, job postings or social media messages. In light of these scams, please bear the following in mind:

McKesson Talent Advisors will never solicit money or credit card information in connection with a McKesson job application.

McKesson Talent Advisors do not communicate with candidates via online chatrooms or using email accounts such as Gmail or Hotmail. Note that McKesson does rely on a virtual assistant (Gia) for certain recruiting-related communications with candidates.

McKesson job postings are posted on our career site: careers.mckesson.com.

McKesson is an Equal Opportunity Employer

McKesson provides equal employment opportunities to applicants and employees, without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, age, genetic information, or any other legally protected category. For additional information on McKesson’s full Equal Employment Opportunity policies, visit our Equal Employment Opportunity page.

McKesson is committed to being an Equal Employment Opportunity Employer and offers opportunities to all job seekers including job seekers with disabilities. If you need a reasonable accommodation to assist with your job search or application for employment, please contact us by sending an email to (United States) [email protected] or (Canada) [email protected]. Resumes or CVs submitted to this email box will not be accepted.

Join us at McKesson!