Senior I O Engineering Consultant

Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health optimization on a global scale. Join us to start Caring. Connecting. Growing together.

Primary Responsibilities:

• Architect and own enterprise-grade Azure cloud infrastructure solutions, ensuring high availability, fault tolerance, scalability, and cost efficiency across all environments
• Design and govern Azure landing zones - including subscription structures, Azure Management Groups, RBAC frameworks, resource tagging strategies, and Azure Policy enforcement
• Own and evolve the Infrastructure as Code codebase using Terraform and Bicep, enforcing modular, reusable, and DRY patterns across dev, staging, and production Azure environments
• Design and maintain CI/CD pipelines using GitHub Actions for infrastructure deployments, automated compliance checks, Terraform plan/apply workflows, and application delivery on Azure
• Implement and manage Azure cloud networking - VNETs, NSGs, UDRs, VNet Peering, Private Endpoints, ExpressRoute, Azure Firewall, Application Gateway, and split-horizon DNS via Azure DNS
• Define and enforce cloud security posture - Azure RBAC, Managed Identities, Entra ID, Azure Policy, Microsoft Defender for Cloud, and least-privilege access patterns across all workloads
• Implement comprehensive observability across Azure workloads using Azure Monitor, Application Insights, Log Analytics Workspaces, and distributed tracing - with automated alerting and operational runbooks
• Lead production incident response - own on-call rotations, blameless post-mortems, SLO/SLA tracking, and root cause analysis for Azure infrastructure-related incidents
• Lead and mentor a team of infrastructure engineers, fostering a culture of engineering excellence, GitOps practices, documentation, and continuous learning
• Evangelize responsible AI adoption within the infrastructure team - defining guidelines for using GitHub Copilot and agentic tools for IaC generation, pipeline development, and automation scripting, with rigorous review and validation practices
• Comply with the terms and conditions of the employment contract, company policies and procedures, and any and all directives (such as, but not limited to, transfer and/or re-assignment to different work locations, change in teams and/or work shifts, policies in regards to flexibility of work benefits and/or work environment, alternative work arrangements, and other decisions that may arise due to the changing business environment). The Company may adopt, vary or rescind these policies and directives in its absolute discretion and without any limitation (implied or otherwise) on its ability to do so

Required Qualifications:

• 10+ years of professional experience in infrastructure engineering, cloud platform engineering, or DevOps, with at least 3+ years in a lead or principal-level role
• Expert-level hands-on experience with Microsoft Azure in production environments  -  including AKS, App Service, Azure Functions, Azure SQL, Cosmos DB, Storage Accounts, and Key Vault
• Solid experience with Azure cloud networking  -  VNET design, NSGs, UDRs, VNet Peering, Private Endpoints, ExpressRoute, Azure Firewall, Application Gateway, and Azure DNS management
• Demonstrated experience implementing observability solutions using Azure Monitor, Application Insights, Log Analytics, and distributed tracing  -  including structured logging, metrics, dashboards, and alerting strategies
• Proven experience ensuring compliance and governance in regulated environments (HIPAA, SOC 2, ISO 27001) through Azure Policy, policy-as-code (OPA/Conftest), and security scanning pipelines (Checkov, tfsec, Trivy, CodeQL)
• Solid understanding of Azure security and identity  -  RBAC, Managed Identities, Entra ID (Azure AD), service principals, OIDC workload federation, and Microsoft Defender for Cloud security posture management
• Deep expertise in designing and maintaining CI/CD pipelines using GitHub Actions  -  including Azure-integrated self-hosted runners, reusable workflows, composite actions, and automated security and compliance gates
• Solid proficiency in Infrastructure as Code using Terraform 1.x and Bicep, including module design, remote state management, and multi-environment deployment patterns on Azure
• Proficiency in scripting and automation using Python, Bash, and/or PowerShell for Azure infrastructure lifecycle management, operational tooling, and developer productivity improvements
• Demonstrated ability to evaluate and responsibly adopt AI-assisted development tools (e.g., GitHub Copilot) for IaC generation, automation scripting, and pipeline development - applying critical review practices to ensure security, correctness, and organizational alignment

At UnitedHealth Group, our mission is to help people live healthier lives and make the health system work better for everyone. We believe everyone-of every race, gender, sexuality, age, location and income-deserves the opportunity to live their healthiest life. Today, however, there are still far too many barriers to good health which are disproportionately experienced by people of color, historically marginalized groups and those with lower incomes. We are committed to mitigating our impact on the environment and enabling and delivering equitable care that addresses health disparities and improves health outcomes  -  an enterprise priority reflected in our mission.