Sr DevOps Engineer - IAM Cloud

UnitedHealth Group; Eden Prairie (MN); Remote; USD 89,000 - 177,000; Full time

Job summary

UnitedHealth Group seeks a security-focused DevOps engineer to optimize cloud IAM technologies and processes within a dynamic environment. The role requires overseeing access controls, disaster recovery strategies, and CI/CD implementations using Azure services, ensuring team collaboration and innovation in cloud environments.

Benefits

Comprehensive benefits package

Incentive and recognition programs

401k contributions

Equity stock purchase

Qualifications

• 2+ years of experience with Azure IAM concepts.
• Experience in CI/CD environments using git.
• Ability to manage cloud identity governance.

Responsibilities

• Define and develop least privilege access policies.
• Implement access controls like role-based access.
• Collaborate on CI/CD pipeline development.

Skills

Azure Identity and Access Management

Infrastructure as Code (IAC)

CI/CD technologies

Scripting languages

Cloud platforms

Federation technologies

Education

Certifications: CompTIA Security+, Azure Administrator Associate

Tools

Terraform

Microsoft Graph API

Azure operations suite

Job description

UnitedHealth Group is a health care and well-being company that’s dedicated to improving the health outcomes of millions around the world. We are comprised of two distinct and complementary businesses, UnitedHealthcare and Optum, working to build a better health system for all. Here, your contributions matter as they will help transform health care for years to come. Make an impact with a diverse team that shares your passion for helping others. Join us to start Caring. Connecting. Growing together.

As a member of this innovative agile team, you will collaborate with others to maintain and optimize these capabilities to secure our growing dynamic cloud computing environments. Engineers on this team will work with many popular vendor and open-source technologies, internally developed applications and cloud native services. You will be challenged to provide technical and thought leadership and to succeed in this role, you need to be eager to learn, able to work through ambiguity, problem solve and communicate effectively.

We are looking for a security-focused DevOps engineer that is a self-starter and demonstrates a solid understanding of the impact of their work. One who is continuously looking for opportunities to simplify and optimize cloud IAM technologies and processes.

You’ll enjoy the flexibility to work remotely* from anywhere within the U.S. as you take on some tough challenges.

Primary Responsibilities:

• Define and develop solutions to enforce least privilege access policies
• Implement and manage access controls, including role-based access control (RBAC)
• Monitoring, logging, and analyzing system performance using Azure operations suite to maintain system health and optimize costs
• Develop and implement disaster recovery and data backup strategies and solutions to maintain business continuity
• Collaborate with development teams to enable CI/CD pipelines for efficient software deployment using Azure services
• Establish and maintain cloud identity governance frameworks
• Develop and maintain guardrails to enforce/measure IAM cloud compliance with regulatory requirements
• Conduct periodic access reviews and monitor user activity
• Lead cloud migration and modernization initiatives
• Advise on best practices for cloud security, reliability, and scalability
• Drive innovation and discovery efforts around new Azure features and services
• Participates in the development of prototypes and large-scale proof of concepts
• Maintain knowledgeable around current application security controls

You’ll be rewarded and recognized for your performance in an environment that will challenge you and give you clear direction on what it takes to succeed in your role as well as provide development for other roles you may be interested in.

Required Qualifications:

• 2+ years of Azure Identity and Access Management concepts and security frameworks experience
• 2+ years of Entra ID and Entra Connect Sync experience
• 2+ years of infrastructure as Code (IAC) and experience working with CI/CD technologies such as git and Terraform (operating in a DevOps setting)
• 2+ years of experience scripting and programming language frameworks such as Python, Microsoft Graph PowerShell SDK, Microsoft Graph API, Shell Scripting languages
• 2+ years of experience with operating with cloud platforms, APIs and event-driven automation
• 2+ years of experience with Federation technologies and protocols such as SAML, OAuth, OIDC, etc.

Preferred Qualifications:

• Certifications: CompTIA Security+, Azure Administrator Associate, Azure Security Engineer Associate, Microsoft Security, Compliance, and Identity Fundamentals, Azure Fundamentals, AWS Cloud Practitioner, AWS Security (Specialty), CCSP or similar is highly desirable
• 2+ years developing and managing Organization policies
• Experience with AWS Identity and Access Management, multi-factor authentication, user provisioning, service principal governance/management, privileged Identity management (PIM), single sign-on (SSO), domain management
• Experience with Cloud IAM functionality across multiple public cloud services (IAM Roles, Permissions and Policies)
• Ability to implement and manage Cloud Infrastructure Entitlement Management (CIEM) to meet organizational access and security objectives
• Proven fundamental understanding of PHI/PII data and the restrictions around it using limited data sets/de-identified data for analysis/development and testing where applicable

*All employees working remotely will be required to adhere to UnitedHealth Group’s Telecommuter Policy.

The salary range for this role is $89,800 to $176,700 annually based on full-time employment. Pay is based on several factors including but not limited to local labor markets, education, work experience, certifications, etc. UnitedHealth Group complies with all minimum wage laws as applicable. In addition to your salary, UnitedHealth Group offers benefits such as, a comprehensive benefits package, incentive and recognition programs, equity stock purchase and 401k contribution (all benefits are subject to eligibility requirements). No matter where or when you begin a career with UnitedHealth Group, you’ll find a far-reaching choice of benefits and incentives.

Application Deadline: This will be posted for a minimum of 2 business days or until a sufficient candidate pool has been collected. Job posting may come down early due to volume of applicants.

At UnitedHealth Group, our mission is to help people live healthier lives and make the health system work better for everyone. We believe everyone–of every race, gender, sexuality, age, location and income–deserves the opportunity to live their healthiest life. Today, however, there are still far too many barriers to good health which are disproportionately experienced by people of color, historically marginalized groups and those with lower incomes. We are committed to mitigating our impact on the environment and enabling and delivering equitable care that addresses health disparities and improves health outcomes — an enterprise priority reflected in our mission.

UnitedHealth Group is an Equal Employment Opportunity employer under applicable law and qualified applicants will receive consideration for employment without regard to race, national origin, religion, age, color, sex, sexual orientation, gender identity, disability, or protected veteran status, or any other characteristic protected by local, state, or federal laws, rules, or regulations.

UnitedHealth Group is a drug - free workplace. Candidates are required to pass a drug test before beginning employment.