Sr. Network Engineer & Warehouse OperationsLocation: Richmond. VA (hybrid)Competitive base pay, bonus and benefit eligibleThe Opportunity:Responsibilities:1. Network Discovery & Dependency MappingConduct structured discovery of all network environments in scope - distribution centers, corporate campuses, warehouse facilities, device networks, and hybrid cloud interconnects before any migration wave begins.
- Inventory all physical network infrastructure (switches, routers, firewalls, load balancers, wireless controllers, OT/IoT device networks) across every site in scope.
- Map application and service dependencies on the existing network topology identifying which workloads, integrations, and operational systems have hard dependencies on current addressing, routing, or latency characteristics.
- Document current-state VLAN structure, IP addressing schemes, routing protocols, WAN/MPLS topology, and site-to-site connectivity in sufficient detail to design against.
- Identify and flag all latency-sensitive or operationally critical network paths (ERP transactions, warehouse device polling, distribution operations) that require special handling during migration.
- Produce dependency maps and site network profiles as formal migration inputs, not informal notes.
2. Future-State Architecture DesignDesign the target-state network architecture for New Company, aligned to a GCP-centric, cloud-first operating model, covering all site types in scope.
- Design the GCP network foundation: VPC topology, Shared VPC strategy, Cloud Interconnect and Cloud VPN architecture for DC and campus connectivity, DNS (Cloud DNS), and global load balancing.
- Architect SD-WAN or cloud-managed WAN strategy to replace MPLS dependencies and connect distribution centers, campuses, and warehouse sites to GCP.
- Define network segmentation strategy for warehouse and distribution center OT/IoT device networks including separation of operational device traffic from corporate and cloud-bound traffic.
- Design wireless network architecture for warehouse and campus environments, including device density planning for handheld scanners, printers, and automation equipment.
- Produce architecture decision records (ADRs) for all significant design choices, establishing documented rationale that the team can rely on post-transformation.
3. Migration Wave PlanningTranslate discovery and architecture outputs into a structured, sequenced migration program with clear wave definitions, dependencies, and go/no-go criteria.
- Define migration waves that sequence sites by risk, complexity, and business criticality ensuring distribution centers and warehouse operations are migrated with appropriate safeguards.
- Build wave plans that include scope definition, dependency pre-requisites, rollback procedures, communication requirements, testing protocols, and cutover windows.
- Identify and resolve cross-wave dependencies particularly where network changes at one site affect application or integration behavior at another.
- Coordinate wave planning with broader carve-out program workstreams: ERP (JDE) migration, integration platform migration (MuleSoft to Spring Boot), and infrastructure separation from McKesson.
- Maintain a living migration tracker visible to program leadership not a deck updated monthly, but a real-time source of truth on wave status, risks, and blockers.
4. Cutover Execution - Distribution Centers, Campuses & WarehousesLead hands-on cutover execution for each migration wave including on-site presence at distribution centers and warehouse facilities where operational continuity is non-negotiable.
- Lead pre-cutover readiness reviews: confirm all dependencies resolved, rollback procedures tested, communication bridges established, and operations teams briefed.
- Execute network cutovers during defined maintenance windows including VLAN changes, routing transitions, firewall policy migrations, WAN cutover, and DNS transitions.
- Manage on-site network cutovers at distribution centers and warehouse facilities, coordinating directly with operations teams, shift supervisors, and WMS owners to minimize operational disruption.
- Execute post-cutover validation checklists confirming connectivity, application reachability, device polling, latency benchmarks, and monitoring coverage before declaring success.
- Own rollback execution when cutover criteria are not met with the judgment to call it and the preparation to execute it cleanly.
5. Device Networks - Warehouses & Operational TechnologyWarehouse and distribution center environments include dense device networks (barcode scanners, label printers, conveyor controllers, RF guns, automation systems) that require specialized handling during migration.
- Understand and account for device network requirements: DHCP reservation management, RF channel planning, device authentication (802.1X or MAC-based), polling frequency, and latency tolerance.
- Coordinate device network changes with operations and WMS teams no device network change is executed without operations sign-off.
- Validate all operational devices post-cutover: scanner connectivity, print server reachability, WMS communication, and any PLC or automation system dependencies.
6. Hybrid Cloud Connectivity - GCP IntegrationEstablish and validate the network connectivity between NewCo's physical sites and GCP, ensuring ERP, integration, and application workloads perform to SLA from all locations.
- Configure and validate Cloud Interconnect or Cloud VPN for each site type, with appropriate bandwidth provisioning and redundancy for business-critical locations.
- Define and enforce QoS policies for ERP (JDE) and latency-sensitive application traffic across the WAN and site networks.
- Work with the Integration Architecture team to validate that Spring Boot API and MuleSoft integration traffic flows correctly through the new network topology during and after migration.
- Implement network observability: VPC Flow Logs, Cloud Monitoring, Network Intelligence Center, and on-premises monitoring integration so production issues are detectable from day one.
7. Documentation & Knowledge Transfer- Maintain comprehensive current-state and target-state network documentation for all sites in scope as a professional standard, not an afterthought.
- Produce runbooks for all standard operational procedures (VLAN changes, firewall rule updates, device onboarding, WAN failover) to support steady-state operations post-transformation.
- Transfer knowledge to the NewCo operations team as each wave completes this role builds toward handing off a well-documented, well-understood network.
Minimum Qualifications- Degree or equivalent and typically requires 7+ years of relevant experience.
Skills and Qualifications- Proven track record leading network cutovers at physical sites distribution centers, warehouses, manufacturing facilities, or equivalent operationally sensitive environments.
- Direct experience with network discovery and dependency mapping at scale not just documenting what you built, but reverse-engineering what someone else built and mapping what depends on it.
- Experience designing and executing migration wave plans in enterprise carve-out, M&A, or large-scale transformation programs is highly desirable.
- Hands-on experience with GCP networking (VPC, Cloud Interconnect, Cloud VPN, Cloud DNS, Cloud Armor) or equivalent cloud networking with demonstrated ability to transition to GCP.
- Experience with SD-WAN platforms (Cisco, Aruba) and cloud-managed WAN transformation. Equinix global data center offering Physical Colocation.
- Warehouse or distribution center networking experience including RF/wireless planning, device network management, and coordination with WMS and operations teams.
Critical Skills- Network Protocols: BGP, OSPF, EIGRP, MPLS, VRF, HSRP/VRRP, STP, 802.1Q, QoS, IPSec - expert-level troubleshooting and design capability.
- Physical Site Networking: Campus switching (Cisco, Juniper, Aruba), wireless (802.11ax and prior), structured cabling, rack/stack and field installation.
- Cloud Networking: GCP VPC, Shared VPC, Cloud Interconnect, Cloud VPN, Cloud Router (BGP), Cloud NAT, Cloud DNS, VPC Service Controls, Network Intelligence Center.
- Firewall & Security: Palo Alto, Cisco ASA/FTD, or equivalent - policy migration, zone-based segmentation, NAT, and Zero Trust network access patterns.
- Infrastructure as Code: Terraform for network resource provisioning; Git-based change management for network configurations.
- Monitoring & Observability: Network monitoring platforms (SolarWinds, PRTG, Grafana, or equivalent), VPC Flow Logs, Cloud Monitoring, packet capture and analysis (Wireshark).
- Wireless & Device Networks: RF survey and design, DHCP/DNS for dense device environments, 802.1X, MAC authentication, device onboarding at scale.
Education and Certifications:- Bachelor's or master's degree in computer science, Data Science, Information Technology, or a related field OR equivalent experience
- CCNP Enterprise or CCIE Enterprise Infrastructure - strongly preferred, a clear differentiator for this role.
- Google Professional Cloud Network Engineer - required or to be obtained within 6 months of start.
- SD-WAN vendor certification (Cisco ENSDWI, VMware SD-WAN, or equivalent) - desirable.
- Project Management Professional (PMP) or equivalent - desirable for wave planning and program coordination responsibilities.
Career Level - P4
We are proud to offer a competitive compensation package at McKesson as part of our Total Rewards. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy, and pay will always be compliant with any applicable regulations. In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered. For more information regarding benefits at McKesson, please click here.
Our Base Pay Range for this position$113,600 - $189,400
McKesson has become aware of online recruiting-related scams in which individuals who are not affiliated with or authorized by McKesson are using McKesson's (or affiliated entities, like CoverMyMeds or RxCrossroads) name in fraudulent emails, job postings or social media messages. In light of these scams, please bear the following in mind:
McKesson Talent Advisors will never solicit money or credit card information in connection with a McKesson job application.
McKesson Talent Advisors do not communicate with candidates via online chatrooms or using email accounts such as Gmail or Hotmail. Note that McKesson does rely on a virtual assistant (Gia) for certain recruiting-related communications with candidates.
McKesson job postings are posted on our career site: careers.mckesson.com.
