Senior IAM/PAM Engineer — Remote, Cloud-Driven Security

UnitedHealth Group; Eden Prairie (MN); Remote; USD 92,000 - 164,000; Full time

Job summary

UnitedHealth Group is seeking a Senior Information Security Engineer to design, deploy, and manage Privileged Access Management (PAM) across hybrid-cloud environments. You will automate vault operations, integrate with Active Directory/LDAP, and ensure least privilege and compliance.

This remote US-wide role offers a competitive salary and opportunities to advance security automation with AI tools, accelerating enterprise IAM across diverse platforms.

Qualifications

• 4+ years of information security experience with a primary focus on IAM and PAM.
• 2+ years of scripting with PowerShell.
• 2+ years of SQL experience.
• 1+ years of hands-on engineering and administration with enterprise PAM technologies (e.g., CyberArk, BeyondTrust, Vault, Delinea).
• 6+ months of experience integrating PAM with AD/LDAP and cloud environments (Azure, AWS, GCP).

Responsibilities

• Design, deploy, configure, and maintain Enterprise PAM tools across hybrid-cloud environments.
• Automate vault operations, privilege elevation workflows, and credential rotation using scripts and IaC.
• Onboard privileged accounts and integrate systems into the PAM architecture with various teams.
• Monitor PAM performance, troubleshoot issues, perform upgrades, and ensure high availability and DR capabilities.
• Maintain privileged account compliance, least privilege, and auditing per security standards.
• Develop technical documentation and SOPs for PAM administration and integration.

Skills

IAM

PAM

PowerShell

SQL

CyberArk

BeyondTrust

HashiCorp Vault

Delinea

Active Directory

LDAP

Cloud integration

Education

High School Diploma or GED

Tools

CyberArk

BeyondTrust

HashiCorp Vault

Delinea

Job description

UnitedHealth Group is seeking a Senior Information Security Engineer to design, deploy, and manage Privileged Access Management (PAM) across hybrid-cloud environments. You will automate vault operations, integrate with Active Directory/LDAP, and ensure least privilege and compliance.

This remote US-wide role offers a competitive salary and opportunities to advance security automation with AI tools, accelerating enterprise IAM across diverse platforms.