Lead DevSecOps Engineer

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well‑being of you and those we serve – we care.

What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow’s health today, we want to hear from you.

We are seeking an experienced Lead Dev Sec Ops  Engineer to drive our cloud infrastructure and security initiatives. You will be responsible for designing, implementing, and maintaining secure, scalable infrastructure on Azure while leading Dev Sec Ops  best practices across the organization, with a strong focus on Git Hub-based workflows and security.

• Design and implement Infrastructure as Code (IaC) solutions on Azure using Terraform and Bicep
• Manage and optimize Azure Kubernetes Service (AKS) clusters, including cluster operations and application deployments
• Deploy and manage applications using Kubernetes manifests through SCCM (System Center Configuration Manager)
• Design and implement secure CI/CD pipelines using Git Hub Actions with integrated security scanning
• Implement and maintain Git Hub Advanced Security (GHAS) across repositories, including code scanning, secret scanning, and dependency reviews
• Develop and enforce secure coding practices and security policies within Git Hub workflows
• Build automated security gates and compliance checks in CI/CD pipelines
• Develop automation scripts using Python and Bash to streamline operations
• Configure and optimize GHAS features including CodeQL analysis and security advisories
• Lead incident response for security vulnerabilities identified through GHAS
• Mentor team members on Dev Sec Ops  practices, Git Hub security features, and cloud technologies
• Collaborate with development, security, and operations teams to ensure secure delivery
• Establish branch protection rules, security policies, and access controls in Git Hub

• Azure Infrastructure as Code (IaC):
  Expert-level experience designing and implementing Azure infrastructure using IaC principles
• Azure Kubernetes Service (AKS):
  Strong experience as a cluster operator, including cluster configuration, scaling, and management
• Kubernetes Application Deployments:
  Proven ability to deploy and manage applications using Kubernetes manifests through SCCM
• Terraform:
  Advanced proficiency in writing, testing, and maintaining Terraform modules and configurations
• Git Hub & CI/CD:
  Expert-level experience designing and implementing CI/CD pipelines using Git Hub Actions
• Git Hub & CI/CD:
  Strong knowledge of Git Hub workflows, reusable actions, and workflow security best practices
• Git Hub & CI/CD:
  Experience with secure secrets management in Git Hub (Git Hub Secrets, Azure Key Vault integration)
• Git Hub Advanced Security (GHAS):
  Hands‑on experience implementing and managing GHAS features
• Git Hub Advanced Security (GHAS):
  Proficiency with CodeQL for custom security queries and code scanning
• Git Hub Advanced Security (GHAS):
  Experience with secret scanning, dependency scanning, and security advisories
• Git Hub Advanced Security (GHAS):
  Ability to triage and remediate security findings from GHAS
• Secure CI/CD Practices:
  Strong understanding of supply chain security and SLSA framework
• Secure CI/CD Practices:
  Experience implementing security scanning at multiple pipeline stages
• Secure CI/CD Practices:
  Knowledge of artifact signing, provenance, and attestation
• Secure CI/CD Practices:
  Familiarity with SAST, DAST, SCA, and container scanning tools
• Scripting:
  Strong Python and Bash scripting skills for automation and tooling
• Deep understanding of container security and Kubernetes security best practices
• Knowledge of Azure security services (Azure Security Center, Key Vault, Azure Policy, etc.)
• Experience with least‑privilege access controls and identity management
• Desirable
  
  Skills:
  
  Bicep:
  Experience…