Senior I O Engineer – OptumServe – Remote

Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by diversity and inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health equity on a global scale. Join us to start Caring. Connecting. Growing together. 

 

This role will lead integration of Optum Serve’s (OS) new Customer Identity and Access Management (CIAM) into Optum Serve’s external portals. The CIAM (possible choices include Government Cloud instances of Okta, ForgeRock or Entra External ID) will act as a single store for external identities belonging to practitioners, customers, etc., as well as provide modern authentication, single sign on (SSO) and multifactor authentication to OS’ external portals. This role will lead integration efforts with OS’ external portals, including provider portal, customer portal, future TPA and M1S portals, etc. Federation with other Identity Providers (IdPs) with our CIAM will be a core responsibility of this role. By centralizing the customer/practitioner identities for all OS external portals, the portal user will have the same credentials and user experience across all OS portals, thereby greatly reducing customer abrasion.

 

This role will be the primary technical owner of OS’ IAM and CIAM platforms. This role will lead gathering OS’ IAM business requirements, ensuring these are communicated to the development team (e.g. Optum Tech/ETIPS’ Sailpoint developers), ensure that OSIT IAM performs user acceptance testing (UAT), as well as other Software Development Life Cycle duties that rely upon the OSIT IAM team. This role will also be a point of escalation in the support of our IAM tool and its operation with Core Business Apps (CBA) such as Nexa/GNAL.

 

You’ll enjoy the flexibility to work remotely * from anywhere within the U.S. as you take on some tough challenges. 

 

Primary Responsibilities: 

• Administer Optum Serve’s government and commercial cloud environments. Configure / maintain the following cloud environments: optumserve.com, opsves.com, Lewin.com, optumservetech.com, limited responsibilities in optumserve-gov.com
• Responsible for the maintenance, operation and availability of all Sailpoint IAM related components managed by Optum Serve. These include the Sailpoint IIQ servers in Production environments, as well as non-production environments
• Support all applications that utilize Sailpoint (aka MyAccessGov) by responding to relevant Service Now tickets.
   This role will be the IAM team’s lead in all Sailpoint & future IAM/CIAM integrations, in particular when integrating with Optum Serve on-premise Active Directories, as well as any cloud environments as required by the business
• Become the lead Sailpoint SME in Optum Serve, advising OSIT technical teams, Architects, etc. As Sailpoint SME, mentor other Sailpoint engineers, create relevant architectural diagrams, workflows, SOPs and other documentation as needed
• Work with the team that administers OS’ Delinea Secret Server, Optum Serve’s Privileged Access Manager (PAM), ensuring OSIT Admins / DevOps have access to their credentials and to the IT assets they maintain and operate
• Must be based in the US (Continental US preferred)

 

You’ll be rewarded and recognized for your performance in an environment that will challenge you and give you clear direction on what it takes to succeed in your role as well as provide development for other roles you may be interested in. 

Required Qualifications: 

• 5+ years of experience working with Active Directory, Group Policies and Entra ID (aka Azure AD)
• 3+ years of experience installing, upgrading and maintaining Windows Servers
• 3+ years of experience customizing Sailpoint IAM platform (or similar IAM/Identity Governance platform)
• 2+ years of experience administering Microsoft Azure / M365 tenants, specifically experience with any of the following: Conditional Access Policies, Entra External ID or Azure B2C, registering Enterprise Applications, licensing, Azure Single Sign On (SSO), Self Service Password Reset (SSPR)
• US Citizenship
• If you are offered this position, you will be required to provide extensive personal information to obtain and maintain a suitability or determination of eligibility for a Confidential/Secret or Top Secret security clearance as a condition of your employment
• Legally authorized to work in the US without any restrictions. Proof will be required
  

 

Preferred Qualifications: 

• Experience with Powershell scripting
• Experience with any CIAM services from Okta, Microsoft Entra Extenal ID, ForgeRock
• Experience with federating identities from providers such as ID.me, Login.gov, etc.
• Experience with Privileged Access Managers (PAM) administration
• Telecommuting is possible, but only from US locations

 

*All employees working remotely will be required to adhere to UnitedHealth Group’s Telecommuter Policy 

 

The salary range for this role is $89,800 to $176,700 annually based on full-time employment. Pay is based on several factors including but not limited to local labor markets, education, work experience, certifications, etc. UnitedHealth Group complies with all minimum wage laws as applicable. In addition to your salary, UnitedHealth Group offers benefits such as, a comprehensive benefits package, incentive and recognition programs, equity stock purchase and 401k contribution (all benefits are subject to eligibility requirements). No matter where or when you begin a career with UnitedHealth Group, you’ll find a far-reaching choice of benefits and incentives.

 

Application Deadline: This will be posted for a minimum of 2 business days or until a sufficient candidate pool has been collected. Job posting may come down early due to volume of applicants.

 

At UnitedHealth Group, our mission is to help people live healthier lives and make the health system work better for everyone. We believe everyone–of every race, gender, sexuality, age, location and income–deserves the opportunity to live their healthiest life. Today, however, there are still far too many barriers to good health which are disproportionately experienced by people of color, historically marginalized groups and those with lower incomes. We are committed to mitigating our impact on the environment and enabling and delivering equitable care that addresses health disparities and improves health outcomes — an enterprise priority reflected in our mission.   

 

 

Diversity creates a healthier atmosphere: UnitedHealth Group is an Equal Employment Opportunity/Affirmative Action employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, protected veteran status, disability status, sexual orientation, gender identity or expression, marital status, genetic information, or any other characteristic protected by law. 

 

UnitedHealth Group is a drug – free workplace. Candidates are required to pass a drug test before beginning employment.

#OptumTechPJ