Principal Infrastructure and Operations Engineering

Optum; Dadri; On-site; INR 11,407,000 - 17,110,000; Full time

Job summary

Optum is seeking a Principal Infrastructure and Operations Engineer to own identity and access engineering across large Microsoft Entra ID environments. You will implement and govern authentication, SSO, and privileged access controls, aligning with enterprise policies and integration across multiple tenant ecosystems.

You will collaborate on change governance, incident response, and automation using PowerShell and Microsoft Graph to support HealthMarkets, USHealth Group, and related tenants.

Qualifications

• Hands-on experience engineering and administering Microsoft Entra ID in a large or complex environment.
• ],
• job_responsibilities_description [

Responsibilities

• Engineer and administer Microsoft Entra ID tenant configurations, authentication methods, enterprise applications, and identity integrations
• Design, implement, and maintain Conditional Access and multifactor authentication controls aligned with enterprise requirements
• Configure and support single sign-on integrations using SAML, OAuth 2.0, and OpenID Connect
• Administer Privileged Identity Management, just-in-time privileged access, role assignments, and access reviews
• Support identity lifecycle processes, including joiner, mover, and leaver scenarios for external agent populations
• Monitor identity service health, investigate authentication issues, and remediate configuration or control gaps
• Develop PowerShell and Microsoft Graph automation for repeatable administration, reporting, and control validation
• Support identity discovery, mapping, tenant build, migration, cutover, and hypercare activities for HealthMarkets
• Produce operational documentation, standard operating procedures, control evidence, and change records

Skills

Microsoft Entra ID

Conditional Access

MFA

SAML

OAuth 2.0

OpenID Connect

PowerShell

Microsoft Graph

Tools

Graph API

Job description

Improve the lives of others while Caring. Connecting. Growing together.

Job Description - Principal Infrastructure and Operations Engineering (2391668)

Principal Infrastructure and Operations Engineering - 2391668

Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health optimization on a global scale. Join us to start Caring. Connecting. Growing together.

The Principal Entra ID Engineer provides engineering and operational ownership for identity and access capabilities across the Microsoft 365 tenants supporting the Enterprise 1099 population. The role is accountable for secure, reliable identity services and enterprise-aligned controls across the tenant portfolio.

Business Need

This role supports a dedicated engineering function responsible for governing and securing the Microsoft 365 and Entra ID environments for USHealth Group, HealthMarkets, and First Family Insurance. The environments support roughly 10,000 external 1099 agents. The position will help align tenant operations, identity controls, email protections, telemetry, and change governance with enterprise policies while supporting the HealthMarkets Google Workspace to Microsoft 365 migration.

Primary Responsibilities

• Engineer and administer Microsoft Entra ID tenant configurations, authentication methods, enterprise applications, and identity integrations
• Design, implement, and maintain Conditional Access and multifactor authentication controls aligned with enterprise requirements
• Configure and support single sign-on integrations using SAML, OAuth 2.0, and OpenID Connect
• Administer Privileged Identity Management, just-in-time privileged access, role assignments, and access reviews
• Support identity lifecycle processes, including joiner, mover, and leaver scenarios for external agent populations
• Monitor identity service health, investigate authentication issues, and remediate configuration or control gaps
• Develop PowerShell and Microsoft Graph automation for repeatable administration, reporting, and control validation
• Support identity discovery, mapping, tenant build, migration, cutover, and hypercare activities for HealthMarkets
• Produce operational documentation, standard operating procedures, control evidence, and change records

Participate in an offshore support model, operational handoffs, incident response, and planned changes

• Comply with all applicable Company policies, procedures, and business directives, changes including those relating to work location, team assignments, work schedules, and flexible work arrangements

Required Qualifications

• Hands-on experience engineering and administering Microsoft Entra ID in a large or complex environment
• Experience with Conditional Access, MFA, enterprise applications, identity governance, and privileged access
• Experience troubleshooting authentication, authorization, federation, provisioning, and access issues
• Working knowledge of SAML, OAuth 2.0, OpenID Connect, provisioning, and directory synchronization concepts
• Proficiency with PowerShell; experience with Microsoft Graph is strongly desired
• Proven ability to work within formal change, incident, problem, and security governance processes
• Proven solid written communication and documentation skills in a distributed engineering environment

Preferred Qualifications

• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Relevant Microsoft security, Azure, or Microsoft 365 certification
• Experience supporting separate or externally facing Microsoft 365 tenants and large contractor populations
• Experience with migration programs, identity source-of-truth design, and cross-tenant or Google-to-Microsoft transitions
• Experience using Rally or comparable Kanban/work management tools for project, operational task, and dependency tracking
• Familiarity with ServiceNow, Splunk, Compass, Maester, or comparable governance and telemetry tooling
• Knowledge of Zero Trust principles and enterprise identity security patterns

At UnitedHealth Group, our mission is to help people live healthier lives and make the health system work better for everyone. We believe everyone–of every race, gender, sexuality, age, location and income–deserves the opportunity to live their healthiest life. Today, however, there are still far too many barriers to good health which are disproportionately experienced by people of color, historically marginalized groups and those with lower incomes. We are committed to mitigating our impact on the environment and enabling and delivering equitable care that addresses health disparities and improves health outcomes — an enterprise priority reflected in our mission.

Job Field

Technology

Organization

OG Adv APAC-1

Other Locations

UnitedHealth Group is committed to working with and providing reasonable accommodations to individuals with physical and mental disabilities. If you need special assistance or accommodation for any part of the application process, please call 1-866-566-8715 to be connected to Recruitment Services. Recruitment Services hours of operation are 7 a.m. to 7 p.m. CT, Monday through Friday.

UnitedHealth Group is a registered service mark of UnitedHealth Group, Inc. The UnitedHealth Group name with the dimensional logo, as well as the dimensional logo alone, are both service marks for the UnitedHealth Group, Inc.

Diversity creates a healthier atmosphere: UnitedHealth Group is an Equal Employment Opportunity/Affirmative Action employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, protected veteran status, disability status, sexual orientation, gender identity or expression, marital status, genetic information, or any other characteristic protected by law.

UnitedHealth Group is a drug-free workplace. Candidates are required to pass a drug test before beginning employment.