Lead End User Computer & Digital Experience Architect

The Endpoint User Computing Architect is the lead technical authority responsible for defining and evolving the architecture for a secure, reliable, and modern digital workplace. This position establishes the target-state strategy, reference architectures, technical standards, and roadmaps for endpoint computing across ChromeOS, Google Workspace, Google Cloud Platform, mobile devices, virtual application delivery, identity, endpoint management, collaboration, productivity, and employee experience services.

The Architect provides deep expertise in Google technologies, including Google Workspace, Chrome Enterprise, Google Admin Console, Google Cloud Platform, Google identity integrations, endpoint security, and device-management capabilities. The role translates business and employee-experience requirements into scalable architecture while ensuring security, compliance, operational resilience, cost effectiveness, and supportability.

As a P5 Lead, this role operates with substantial autonomy, leads through influence, resolves complex cross-platform challenges, mentors engineers and architects, and guides technical decisions across product, security, infrastructure, operations, and business teams.

·    Define and maintain the target-state architecture and multiyear roadmap for endpoint computing and digital workplace capabilities.

·    Establish reference architectures, patterns, standards, and technical guardrails for ChromeOS, Chromebooks, Windows, macOS, mobile devices, virtual applications, browsers, collaboration platforms, and productivity services.

·    Serve as the lead architecture authority for Google Workspace and Chrome Enterprise, including Gmail, Calendar, Drive, Shared Drives, Meet, Chat, identity federation, application access, device policies, browser controls, and data-protection capabilities.

·    Design integrations between Google Workspace, GCP, identity providers, endpoint-management platforms, security tools, service-management platforms, and enterprise applications.

·    Define architectures for secure access from managed endpoints to applications and data hosted in GCP, SaaS platforms, partner environments, and legacy infrastructure.

·    Lead architecture reviews for new endpoint capabilities, major migrations, acquisitions, divestitures, third-party integrations, and workplace transformation initiatives.

·    Translate business, security, privacy, regulatory, and operational requirements into reusable technical standards and implementation guidance.

·    Provide architectural direction for endpoint identity, authentication, device trust, zero-trust access, privileged administration, encryption, data loss prevention, logging, monitoring, vulnerability management, and threat protection.

·    Evaluate emerging Google, endpoint, AI, automation, and employee-experience technologies and recommend adoption based on business value, risk, interoperability, and total cost.

·    Identify architectural risks, technical debt, platform dependencies, and lifecycle concerns, then define practical remediation and modernization plans.

·    Partner with Technical Product Managers to align product roadmaps, architecture strategy, investment priorities, and measurable employee outcomes.

·    Partner with engineering and operations teams to ensure designs can be implemented, supported, monitored, and continuously improved.

·    Guide proof-of-concept activities, design validation, performance testing, resiliency testing, and technical acceptance criteria.

·    Maintain architecture decision records, diagrams, standards, patterns, and roadmap documentation.

·    Mentor architects and engineers, perform critical reviews of technical deliverables, and raise architecture and engineering maturity across the organization.

·    Communicate technical options, risks, costs, and trade-offs clearly to senior technology and business leaders.

·    Lead vendor technical evaluations and ensure partner solutions align with architecture, security, interoperability, and service requirements.

·    Bachelor's degree in computer science, information technology, engineering, information systems, or a related discipline, or equivalent practical experience.

·    Typically 10 or more years of relevant technology experience, including significant experience in endpoint, infrastructure, workplace, or cloud architecture.

·    Demonstrated architecture experience with enterprise-scale Google Workspace and Chrome Enterprise environments.

·    Strong hands-on knowledge of Google Workspace administration, organizational units, groups, context-aware access, endpoint controls, Chrome policies, Gmail, Calendar, Drive, Meet, Chat, and collaboration governance.

·    Strong understanding of GCP architecture and services relevant to endpoint access, identity, logging, automation, application delivery, security, networking, and integration.

·    Experience designing endpoint solutions across ChromeOS and at least two of the following: Windows, macOS, Android, iOS, virtual desktop, or virtual application delivery.

·    Experience with identity federation, SSO, MFA, device trust, lifecycle provisioning, directory synchronization, and role-based administration.

·    Strong understanding of zero-trust architecture, endpoint security, data protection, secure browser, encryption, vulnerability management, and compliance controls.

·    Experience defining reference architectures, technical standards, design patterns, roadmaps, and architecture decision records.

·    Ability to lead highly complex initiatives involving multiple platforms, vendors, teams, and business functions.

·    Strong communication skills with the ability to influence technical teams, product leaders, senior stakeholders, and external partners.

·    Demonstrated ability to mentor technical professionals and lead through influence without direct management authority.

·    Google Professional Cloud Architect certification.

·    Google Professional Cloud Security Engineer certification.

·    Google Workspace Administrator or Chrome Enterprise certifications.

·    Experience with Google Workspace migrations, coexistence, merger, acquisition, or separation programs.

·    Experience with Okta or comparable identity platforms.

·    Experience with Google Endpoint Management, Chrome Enterprise, Workspace ONE, Microsoft Intune, Jamf, CrowdStrike, Zscaler, or comparable platforms.

·    Experience with automation using APIs, scripting, infrastructure as code, or policy as code.

·    Experience operating technology in healthcare, regulated, or audit-sensitive environments.

·    Working knowledge of ITIL, Agile delivery, DevSecOps, service management, and product operating models.

·    Adoption and reuse of endpoint reference architectures and standards.

·    Reduction in unsupported designs, technical debt, and high-risk exceptions.

·    Improved endpoint security, reliability, interoperability, and employee experience.

·    Delivery of architecture roadmaps that align investments with business priorities.

·    Effective architecture decision-making across Google Workspace, GCP, endpoint, identity, and security domains.

·    Development of technical capability through mentoring and architecture community leadership.

We are proud to offer a competitive compensation package at McKesson as part of our Total Rewards. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy, and pay will always be compliant with any applicable regulations. In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered. For more information regarding benefits at McKesson, please 

Our Base Pay Range for this position

McKesson has become aware of online recruiting-related scams in which individuals who are not affiliated with or authorized by McKesson are using McKesson’s (or affiliated entities, like CoverMyMeds or RxCrossroads) name in fraudulent emails, job postings or social media messages. In light of these scams, please bear the following in mind:

McKesson Talent Advisors will never solicit money or credit card information in connection with a McKesson job application.

McKesson Talent Advisors do not communicate with candidates via online chatrooms or using email accounts such as Gmail or Hotmail. Note that McKesson does rely on a virtual assistant (Gia) for certain recruiting-related communications with candidates.

McKesson job postings are posted on our career site: .

Join us at McKesson!