Sr. Cloud Engineer

About the role

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve – we care. What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow’s health today, we want to hear from you.

Responsibilities

• GCP Foundation, Landing Zones & Infrastructure-as-Code Cloud Architecture & Automation: Design, build, and maintain enterprise GCP infrastructure using Terraform/Terragrunt, enforcing Infrastructure-as-Code (IaC) and GitOps practices for all cloud environments.
• Landing Zone Governance: Own the configuration and security baseline of GCP Organization structures, Projects, Folders, Resource Hierarchies, and IAM roles/permissions using least‑privilege principles.
• Network & Hybrid Connectivity: Configure and maintain GCP Shared VPCs, VPC Service Controls (VPC‑SC), Cloud Interconnect, Cloud VPN, Cloud DNS, Firewall Rules, and load balancers to support secure, low‑latency hybrid connectivity between GCP services, Apigee X, and Oracle Exadata / JDE ERP environments.
• Apigee X & Oracle Exadata / JDE ERP Integration Support Apigee X Platform Engineering: Provision, configure, and maintain Apigee X runtime environments, API gateways, PSC (Private Service Connect) attachments, and load balancers in accordance with enterprise security baselines.
• Oracle Exadata & JDE Interconnect: Engineer and maintain high‑performance, resilient hybrid network topology (Cloud Interconnect/Partner Interconnect) linking GCP applications and Apigee gateways directly to Oracle Exadata database systems and JDE backend services.
• API Security & Traffic Controls: Work alongside Integration Architects to enforce mTLS, VPC Service Controls, rate limiting, and secure endpoints across Apigee X, GCP microservices, and Exadata/JDE integration boundaries.
• Containerization