Senior Manager Info Security Engineer - Cryptography & Certification Management

Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health optimization on a global scale. Join us to start Caring. Connecting. Growing together.    

Primary Responsibilities:

• Lead and evolve the enterprise TLS Certificate Management and Public Key Infrastructure (PKI) program, defining long-term roadmaps, governance frameworks, and operational metrics
• Direct a high-performing technical team, providing people management, professional development, resource planning, and operational oversight
• Lead the development and operationalization of a comprehensive Certificate Management program, collaborating with engineering teams and stakeholders to automate and govern the full TLS/SSL certificate lifecycle across public, internal, and intermediate CA environments
• Manage and enhance enterprise certificate management platforms (e.g., Venafi Certificate Manager) leveraging Registration Authorities (RA) and automated certificate discovery, monitoring, and lifecycle workflows
• Integrate certificate management processes across multi-cloud environments, container platforms, core infrastructure, applications, and enterprise security frameworks
• Engage with CXO leadership, senior executives, and cross-functional teams to communicate risk management strategies, security posture, and business-focused program outcomes
• Establish operational frameworks, service maturity models, risk management best practices, and audit/compliance alignment for enterprise cryptographic assets

• Lead incident response, vulnerability remediation, and root-cause analysis for any potential security risks or certificate expiration incidents

• Comply with all applicable Company policies, procedures, and business directives, changes including those relating to work location, team assignments, work schedules, and flexible work arrangements

Required Qualifications:

• Undergraduate degree or equivalent experience
• 12+ years of overall experience in Information Security, Cybersecurity, Infrastructure Security, or related technology domains
• 5+ years of direct people management and leadership experience, including developing technical teams and leading large-scale enterprise security programs
• Proven experience managing enterprise-wide certificate management programs in complex, highly regulated, or large-scale environments
• Hands-on experience with certificate formats (PEM, DER, CER, PFX), CSR generation, Certificate Revocation Lists (CRL), and certificate troubleshooting across public, private, intermediate, and self-signed CAs
• Experience with enterprise certificate management solutions (e.g., Venafi Certificate Manager or equivalent) leveraging Registration Authorities (RA) and automated certificate deployment workflows
• Demonstrated experience communicating, presenting to, and collaborating with executive stakeholders (CXOs) and cross-functional technology leaders
• Proven extensive technical expertise in Cryptography, Public Key Infrastructure (PKI), Certificate Trust Models, and TLS/SSL certificate lifecycle management

Preferred Qualifications:

• Industry-recognized cybersecurity certifications such as CISSP, CISM, or equivalent
• Experience integrating certificate management workflows into multi-cloud environments (AWS, Azure, GCP), CI/CD pipelines, and container orchestration platforms
• Strategic experience developing governance frameworks, operational metrics, service maturity models, and continuous improvement metrics for PKI programs
• Familiarity with Hardware Security Modules (HSMs), Key Management Services (KMS), and advanced cryptographic standards

At UnitedHealth Group, our mission is to help people live healthier lives and make the health system work better for everyone. We believe everyone-of every race, gender, sexuality, age, location and income-deserves the opportunity to live their healthiest life. Today, however, there are still far too many barriers to good health which are disproportionately experienced by people of color, historically marginalized groups and those with lower incomes. We are committed to mitigating our impact on the environment and enabling and delivering equitable care that addresses health disparities and improves health outcomes - an enterprise priority reflected in our mission.