IO Engineer, IAM - Remote

Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health optimization on a global scale. Join us to start Caring. Connecting. Growing together.   

This role is within the Endpoint Operations' Identity and Access Management (IAM) team. This position implements and operates identity and access management solutions, including Single Sign On (SSO), RSA SecurID Multi-Factor Authentication (MFA), Consumer Identity Access Management (CIAM) solutions (e.g. Ping Government Identity Cloud CIAM and Azure Entra ID). Facilitates integration of identity tools into existing and new applications. Provides architecture drawings, documents system specifications and standards as required by the business. Works in a team supporting IAM projects working with enterprise architects and developers, trainers and communications teams to provide a holistic solution, improving and simplifying end user experience, while also working to improve and modernize Optum Serve's Identity Governance Administration / authentication and authorization solutions. Mentors others in the IAM team as needed.

You'll enjoy the flexibility to work remotely * from anywhere within the U.S. as you take on some tough challenges. For all hires in the Minneapolis or Washington, D.C. area, you will be required to work in the office a minimum of four days per week.


Primary Responsibilities:

• Works under the guidance of the Identity Enterprise Architect, the IAM Manager and Endpoint Ops Director to gather business requirements, design, implement and operate identity solutions
• Act as a technical resource to others to resolve problems or issues
• Administration of the IAM platform or internal applications related to IAM systems
• Mentors others in IAM team on Optum Serve's Identity & Access Management platforms
• Creates documentation describing in detail, data flows, security measures, protocols and daily operational needs of IAM systems as required by the business
• Acts as subject matter expert (SME) during audits, vendor engagements, etc.
• Act as a technical resource to resolve incidents, issues, errors or related tasks. Respond to and resolve support requests
• Responsible for maintaining IAM related Service Level Objectives / Agreements (SLO/SLA)
• Develop and maintain reporting needed to monitor IAM SLAs and work performance
• Plan, analyze, design, implementation, and maintenance of all layers of IAM applications, including Authorization/Authentication and Account Creation/Management/Provisioning
• Analyze business processes and development of automation/scripting (AI) where applicable
• Anticipate needs and proactively identify solutions
• Maintain centralized documentation including network/environment diagrams, work instructions and other documentation as assigned
• Follow all escalation procedures according to policy and standards to meet SLAs
• Provide an accurate record of work in request / incident management ticketing tools
• Utilize standard corporate tools to record change and problem activities for tracking purposes
• Be result oriented with tasks, completed with high sense of urgency and quality
• Assists in other duties as needed and directed

You'll be rewarded and recognized for your performance in an environment that will challenge you and give you clear direction on what it takes to succeed in your role as well as provide development for other roles you may be interested in. 

Required Qualifications:

• Associate's degree in IT or related field or 8 years of equivalent experience
• 4+ years of experience working with Microsoft Environments, Active Directory, Group Policy Objects
• 2+ years of experience working in cloud environments (IaaS, PaaS, SaaS): Microsoft Azure/Entra, Amazon, etc.
• Experienced working with Single Sign On (SSO), Modern Authentication Methods, Multi Factor Authentication (MFA)
• Working knowledge of IP networking, Internet, DNS
• Familiarity with NIST 800-53 Rev 5 IAM requirements and NIST 800-63
• Available for on-call as needed
• US Citizenship required
• US Based

Preferred Qualifications:

• Information Technology Certifications
• Experienced in building Windows Workstation OS and Windows Server
• Functional knowledge of Active Directory, Group Policies and DNS
• Familiarity with
• SailPoint IIQ (IGA tool)
• RSA SecurID
• Delinea Secret Server
• Ping's Customer Identity & Access Management (CIAM)
• Solid interpersonal and communication skills
• Solid documentation skills
• Works independently with minimal supervision
• Effective time management skillset
• Effective troubleshooting skillset and a commitment to solving problems
• Proven ability to take responsibility for assigned tasks and prioritize workload in a fast-paced environment
• Proven ability to adhere to procedures and maintain accurate detailed records
  

*All employees working remotely will be required to adhere to UnitedHealth Group's Telecommuter Policy.

Pay is based on several factors including but not limited to local labor markets, education, work experience, certifications, etc. In addition to your salary, we offer benefits such as, a comprehensive benefits package, incentive and recognition programs, equity stock purchase and 401k contribution (all benefits are subject to eligibility requirements). No matter where or when you begin a career with us, you'll find a far-reaching choice of benefits and incentives. The salary for this role will range from $72,800 - $130,000 annually based on full-time employment. We comply with all minimum wage laws as applicable.

Application Deadline: This will be posted for a minimum of 2 business days or until a sufficient candidate pool has been collected. Job posting may come down early due to volume of applicants.

At UnitedHealth Group, our mission is to help people live healthier lives and make the health system work better for everyone. We believe everyone-of every race, gender, sexuality, age, location and income-deserves the opportunity to live their healthiest life. Today, however, there are still far too many barriers to good health which are disproportionately experienced by people of color, historically marginalized groups and those with lower incomes. We are committed to mitigating our impact on the environment and enabling and delivering equitable care that addresses health disparities and improves health outcomes - an enterprise priority reflected in our mission.

UnitedHealth Group is an Equal Employment Opportunity employer under applicable law and qualified applicants will receive consideration for employment without regard to race, national origin, religion, age, color, sex, sexual orientation, gender identity, disability, or protected veteran status, or any other characteristic protected by local, state, or federal laws, rules, or regulations.

UnitedHealth Group is a drug - free workplace. Candidates are required to pass a drug test before beginning employment.