Security Engineer - Certificate Mgt/ PKI - Remote or Hybrid from MN or DC

You will be a contributing member of the team responsible for Optum's Digital Certificate Services Team focused on driving adoption of our enterprise certificate lifecycle management platform and digital certificate management practices into new businesses within the UnitedHealth Group portfolio. The focus of this position will be on collaborating with acquired entity IT support teams to partner, train, and support the use of the Optum enterprise digital certificate management platform and migrate certificate issuance to Optum trusted Certificate authorities. Secondary responsibilities include supporting our certificate lifecycle management platform in a restricted network enclave and supporting management of the public domain name portfolio.

Collaborate with other IT teams to drive certificate automation and other certificate management best practices. Provide operational support in the day-to-day tasks involved with providing a centralized, enterprise certificate management platform and code signing service.

You will enjoy the flexibility to work remotely from anywhere within the U.S. For all hires in the Minneapolis or Washington, D.C. area, you will be required to work in the office a minimum of four days per week.

Primary Responsibilities

• Direct point of contact for acquired entities for public domain name and digital certificate migration, management, and automation
• Develop and distribute communications and training materials along with conducting training sessions
• Provide operations support for the enterprise certificate lifecycle management platform based on the CyberArk\Venafi Certificate Management Datacenter and Cloud platform including in Optum's core network and the special restricted network enclave
• Provide operational support for the UHG public domain name portfolio including migration, acquisition, and divesting activities
• Collaborate with the team to engineer continuous service improvement and new features
• Support customer use of digital certificates leveraging best practices and automation
• Provide innovative solutions to automate repetitive tasks
• Participate as an independent contributor within an agile based team
• Participate in a 24x7 on call rotation supporting certificate operations
• Leverage enterprise-approved AI tools to enhance productivity and innovation by streamlining workflows and automating repetitive tasks
• Evaluate emerging trends to drive continuous improvement and strategic innovation

Required Qualifications

• 2+ years of Windows Server administration experience
• 2+ years of Unix/Linux Server administration experience
• 2+ years of general network experience with emphasis on DNS, firewall, and proxy knowledge
• 2+ years of enterprise application platform operational support experience1+ years of PKI, certificate management, or related experience working with x.509 digital certificates
• Scripting and automation experience leveraging Powershell, Python, or other scripting languages
• Experience with certificate lifecycle management platforms, with emphasis on Venafi products
• Ability to participate in on call rotation

Preferred Qualifications

• Undergraduate degree in applicable area of expertise or equivalent experience
• CISSP or other security related certification
• General Identity and Access Management technology experience
• Experience implementing digital certificates in applications, containers, or other platforms

Salary and Benefits

Pay is based on several factors including, but not limited to, local labor markets, education, work experience, certifications, etc. In addition to your salary, we offer benefits such as a comprehensive benefits package, incentive and recognition programs, equity stock purchase and 401(k) contribution (all benefits are subject to eligibility requirements). The salary for this role will range from $91,700 to $163,700 annually based on full-time employment.

We comply with all minimum wage laws as applicable.

Equal Employment Opportunity Statement

UnitedHealth Group is an Equal Employment Opportunity employer under applicable law and qualified applicants will receive consideration for employment without regard to race, national origin, religion, age, color, sex, sexual orientation, gender identity, disability, or protected veteran status, or any other characteristic protected by local, state, or federal laws, rules, or regulations.

Drug Test Policy

UnitedHealth Group is a drug‑free workplace. Candidates are required to pass a drug test before beginning employment.