Security Engineer - Certificate Mgt​/PKI - Remote or Hybrid from MN or DC

Position: Security Engineer - Certificate Mgt/ PKI - Remote or Hybrid from MN or DC
Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by inclusion, talented peers, comprehensive benefits and career development opportunities.

Come make an impact on the communities we serve as you help us advance health optimization on a global scale. Join us to start Caring. Connecting. Growing together.

The Enterprise Information Security (EIS) team is responsible for cybersecurity across our organization. We support our business and members by reducing risk, rapidly responding to threats, focusing on business resiliency and securing new acquisitions.

Be a contributing member of the team responsible for Optum's Digital Certificate Services Team focused on driving adoption of our enterprise certificate lifecycle management platform and digital certificate management practices into new businesses within the United Health Group portfolio. The focus of this position will be on collaborating with acquired entity IT support teams to partner, train, and support the use of the Optum enterprise digital certificate management platform and migrate certificate issuance to Optum trusted Certificate authorities.

Secondary responsibilities include supporting our certificate lifecycle management platform in a restricted network enclave and supporting management of the public domain name portfolio. Collaborate with other IT teams to drive certificate automation and other certificate management best practices. Provide operational support in the day-to-day tasks involved with providing a centralized, enterprise certificate management platform and code signing service.

You'll enjoy the flexibility to work remotely
* from anywhere within the U.S. as you take on some tough challenges. For all hires in the Minneapolis or Washington, D.C. area, you will be required to work in the office a minimum of four days per week.

Primary Responsibilities:

* Direct point of contact for acquired entities for public domain name and digital certificate migration, management, and automation

* Develop and distribute communications and training materials along with conducting training sessions

* Provide operations support for the enterprise certificate lifecycle management platform based on the Cyber Ark enafi Certificate Management Datacenter and Cloud platform including in Optum's core network and the special restricted network enclave

* Provide operational support for the UHG public domain name portfolio including migration, acquisition, and divesting activities

* Collaborate with the team to engineer continuous service improvement and new features

* Support customer use of digital certificates leveraging best practices and automation

* Provide innovative solutions to automate repetitive tasks

* Participate as an independent contributor within an agile based team

* Participate in a 24x7 on call rotation supporting certificate operations

* Leverage enterprise-approved AI tools to enhance productivity and innovation by streamlining workflows and automating repetitive tasks

* Evaluate emerging trends to drive continuous improvement and strategic innovation

You'll be rewarded and recognized for your performance in an environment that will challenge you and give you clear direction on what it takes to succeed in your role as well as provide development for other roles you may be interested in.

Required Qualifications:

* 2+ years of Windows Server administration experience

* 2+ years of Unix/Linux Server administration experience

* 2+ years of general network experience with emphasis on DNS, firewall, and proxy knowledge

* 2+ years of enterprise application platform operational support experience

* 1+ years of PKI, certificate management, or related experience working with x.509 digital certificates

* Scripting and automation experience leveraging Powershell, Python, or other scripting languages

* Experience with certificate lifecycle management platforms, with emphasis on Venafi…