Principal Infrastructure and Operations Engineering

UnitedHealth Group; Dadri; On-site; INR 400,000 - 750,000; Full time

Job summary

UnitedHealth Group seeks an experienced Principal Entra ID Engineer to own identity and access capabilities across Microsoft 365 tenants. You will design, implement, and manage Entra ID configurations, SSO, and privileged access for a large external agent population, ensuring secure, compliant operations and offshore support coordination.

The role emphasizes automation with PowerShell and Microsoft Graph, complex troubleshooting, and adherence to change governance while supporting HealthMarkets

Qualifications

• Hands-on experience engineering and administering Microsoft Entra ID in a large or complex environment.
• Experience with Conditional Access, MFA, enterprise applications, identity governance, and privileged access
• Experience troubleshooting authentication, authorization, federation, provisioning, and access issues
• Proficiency with PowerShell; experience with Microsoft Graph is strongly desired

Responsibilities

• Engineer and administer Microsoft Entra ID tenant configurations, authentication methods, enterprise applications, and identity integrations
• Design, implement, and maintain Conditional Access and multifactor authentication controls aligned with enterprise requirements
• Configure and support single sign-on integrations using SAML, OAuth 2.0, and OpenID Connect
• Administer Privileged Identity Management, just-in-time privileged access, role assignments, and access reviews
• Support identity lifecycle processes, including joiner, mover, and leaver scenarios for external agent populations
• Monitor identity service health, investigate authentication issues, and remediate configuration or control gaps
• Develop PowerShell and Microsoft Graph automation for repeatable administration, reporting, and control validation
• Support identity discovery, mapping, tenant build, migration, cutover, and hypercare activities for HealthMarkets
• Produce operational documentation, standard operating procedures, control evidence, and change records
• Participate in an offshore support model, operational handoffs, incident response, and planned changes
• Comply with all applicable Company policies, procedures, and business directives, changes including those relating to work location, team assignments, work schedules, and flexible work arrangements

Skills

Entra ID engineering

Conditional Access

MFA

Identity governance

Privileged access

PowerShell scripting

Microsoft Graph

Education

Undergraduate degree or equivalent experience

Tools

PowerShell

Microsoft Graph

Job description

Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health optimization on a global scale. Join us to start Caring. Connecting. Growing together.

The Principal Entra ID Engineer provides engineering and operational ownership for identity and access capabilities across the Microsoft 365 tenants supporting the Enterprise 1099 population. The role is accountable for secure, reliable identity services and enterprise-aligned controls across the tenant portfolio.

Business Need

This role supports a dedicated engineering function responsible for governing and securing the Microsoft 365 and Entra ID environments for USHealth Group, HealthMarkets, and First Family Insurance. The environments support roughly 10,000 external 1099 agents. The position will help align tenant operations, identity controls, email protections, telemetry, and change governance with enterprise policies while supporting the HealthMarkets Google Workspace to Microsoft 365 migration.

Primary Responsibilities:

• Engineer and administer Microsoft Entra ID tenant configurations, authentication methods, enterprise applications, and identity integrations
• Design, implement, and maintain Conditional Access and multifactor authentication controls aligned with enterprise requirements
• Configure and support single sign-on integrations using SAML, OAuth 2.0, and OpenID Connect
• Administer Privileged Identity Management, just-in-time privileged access, role assignments, and access reviews
• Support identity lifecycle processes, including joiner, mover, and leaver scenarios for external agent populations
• Monitor identity service health, investigate authentication issues, and remediate configuration or control gaps
• Develop PowerShell and Microsoft Graph automation for repeatable administration, reporting, and control validation
• Support identity discovery, mapping, tenant build, migration, cutover, and hypercare activities for HealthMarkets
• Produce operational documentation, standard operating procedures, control evidence, and change records

• Participate in an offshore support model, operational handoffs, incident response, and planned changes

• Comply with all applicable Company policies, procedures, and business directives, changes including those relating to work location, team assignments, work schedules, and flexible work arrangements

Required Qualifications:

• Undergraduate degree or equivalent experience
• Hands-on experience engineering and administering Microsoft Entra ID in a large or complex environment
• Experience with Conditional Access, MFA, enterprise applications, identity governance, and privileged access
• Experience troubleshooting authentication, authorization, federation, provisioning, and access issues
• Working knowledge of SAML, OAuth 2.0, OpenID Connect, provisioning, and directory synchronization concepts
• Proficiency with PowerShell; experience with Microsoft Graph is strongly desired
• Proven ability to work within formal change, incident, problem, and security governance processes
• Proven solid written communication and documentation skills in a distributed engineering environment

Preferred Qualifications:

• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Relevant Microsoft security, Azure, or Microsoft 365 certification
• Experience supporting separate or externally facing Microsoft 365 tenants and large contractor populations
• Experience with migration programs, identity source-of-truth design, and cross-tenant or Google-to-Microsoft transitions
• Experience using Rally or comparable Kanban/work management tools for project, operational task, and dependency tracking
• Familiarity with ServiceNow, Splunk, Compass, Maester, or comparable governance and telemetry tooling
• Knowledge of Zero Trust principles and enterprise identity security patterns

At UnitedHealth Group, our mission is to help people live healthier lives and make the health system work better for everyone. We believe everyone-of every race, gender, sexuality, age, location and income-deserves the opportunity to live their healthiest life. Today, however, there are still far too many barriers to good health which are disproportionately experienced by people of color, historically marginalized groups and those with lower incomes. We are committed to mitigating our impact on the environment and enabling and delivering equitable care that addresses health disparities and improves health outcomes - an enterprise priority reflected in our mission.