Principal Information Security Engineering - Remote or Hybrid in MN or DC

UnitedHealth Group•Plymouth, MN

9d•$112,700 - $193,200•Hybrid

About The Position

Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health optimization on a global scale. Join us to start Caring. Connecting. Growing together. Join our Enterprise Security team at Optum Technology as a Principal Information Security Engineer (US Remote), where you will lead our high-impact multi-CDN and cloud resiliency initiative. In this critical role, you will own the end-to-end security architecture, traffic steering, and edge resilience strategies across Cloudflare and Akamai to protect our internet-facing applications. Our team is responsible for managing enterprise-scale CDN configurations, advanced WAF, DDoS mitigation, and load-balancing environments (including F5 platforms). This is an exciting opportunity to work with cutting-edge edge security technologies, leverage AI-powered design solutions, and ensure the performance, availability, and security of services that touch millions of lives every day. You’ll enjoy the flexibility to work remotely from anywhere within the U.S. as you take on some tough challenges. For all hires in the Minneapolis or Washington, D.C. area, you will be required to work in the office a minimum of four days per week.

Requirements

7+ years of experience in network security, cloud security, or application delivery within a large-scale enterprise environment
5+ years of hands-on experience designing and managing Cloudflare and/or Akamai security platforms (including WAF, DDoS mitigation, and DNS-based traffic steering)
5+ years of experience working with core network and web protocols (including DNS, HTTP/S, TLS, and TCP/IP) along with troubleshooting real-world routing and edge failure modes
3+ years of experience designing, operating, or implementing multi-CDN architectures utilizing health-based DNS steering and traffic management
3+ years of experience in security incident response, including managing high-priority (P1) incident resolution, technical troubleshooting, and vendor escalations during major edge or CDN outages
3+ years of experience integrating CDN solutions with public cloud platforms (such as AWS, Azure, or GCP) and on-premises infrastructure
2+ years of experience using automation and scripting tools (such as Terraform, Ansible, Python, or APIs) to manage large-scale configurations

Nice To Haves

Bachelor's degree or higher in Computer Science, Information Security, or a related technical field
Relevant professional certifications in cloud security or networking (e.g., CCSP, CISSP, Cloudflare/Akamai certifications, or cloud provider security credentials)
Experience with F5 application delivery controllers (LTM, GTM, ASM/WAF) or equivalent load balancing and security technologies
Experience leveraging AI-powered development tools, code assistants, or APIs to accelerate development, automate network configurations, or optimize security policies
Experience working within highly regulated environments (e.g., healthcare, finance) with strict compliance frameworks such as PCI-DSS, SOC 2, or HIPAA
Proven solid technical communication skills, with a proven ability to translate complex architectural and security trade-offs for executive stakeholders and cross-functional teams

Responsibilities

Design, develop, and deploy AI-powered solutions and automation tools to address complex business challenges in edge security and network resilience, with a strong emphasis on the responsible use of AI
Evaluate emerging technology and industry trends, including artificial intelligence and machine learning applications in cybersecurity, to inform solution design and strategic network resilience innovation
Use enterprise-approved AI tools to streamline workflows, automate edge CDN and DNS configurations, and drive continuous improvement across internet-facing applications
Own the end-to-end security architecture and operational strategy for enterprise edge security platforms, including Cloudflare and Akamai (covering WAF, DDoS, bot management, TLS, DNS, and edge traffic management)
Design, operate, and maintain health-based DNS steering and traffic management strategies to support active-active and failover scenarios across multiple CDNs and cloud/on-prem regions
Establish and enforce enterprise-scale standards for DNS TTLs, health checks, monitoring, and steering logic to optimize failover speed and cache efficiency
Serve as the principal technical escalation point for major security and availability incidents, including CDN outages, large-scale DDoS attacks, and application-impacting events
Collaborate with network platform, application security, and security operations center (SOC) teams to implement consistent ingress security controls and standard incident response workflows
Lead the secure onboarding and migration of critical applications into a resilient, multi-CDN architecture with minimal downtime
Support regulatory compliance and audit activities (including PCI-DSS, SOC2, and internal risk assessments) as they relate to edge security, traffic management, and DNS