Principal Software Engineer -Remote

UnitedHealth Group•Eden Prairie, MN

2d•Remote

About The Position

Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health optimization on a global scale. Join us to start Caring. Connecting. Growing together. This role leads the enterprise Open Source Program Office, defining the strategy and governance for the compliant, secure, and scalable use of open source software, data, and AI/ML models. It protects intellectual property and business interests while enabling teams to innovate rapidly within clear, enterprise wide guardrails. You’ll enjoy the flexibility to work remotely from anywhere within the U.S. as you take on some tough challenges. For all hires in the Minneapolis or Washington, D.C. area, you will be required to work in the office a minimum of four days per week. You’ll be rewarded and recognized for your performance in an environment that will challenge you and give you clear direction on what it takes to succeed in your role as well as provide development for other roles you may be interested in.

Requirements

7+ years of experience in software engineering, platform engineering, or DevOps, with demonstrated experience delivering software solutions across multiple teams and products
3+ years influencing enterprise‑scale architecture, platforms, standards and governance
2+ years of experience with SBOM generation, dependency analysis, and governance tooling, including tools such as GitHub Advanced Security, JFrog Xray, or equivalent
2+ years experience with open source licensing and compliance, including license obligations, policy interpretation, and risk management for internally used and externally distributed software
Experience designing and operating compliance as engineering systems, embedding controls into CI/CD pipelines, developer platforms, and SDLC workflows
Solid proficiency in one or more modern programming languages (e.g., Python, Java, JavaScript/TypeScript)
Proven ability to partner cross functionally with senior engineers, architects, security, legal, platform, and product teams to translate policy and regulatory requirements into practical technical standards

Nice To Haves

Experience working within or closely alongside an Open Source Program Office (OSPO), AppSec, or enterprise governance function
Experience reviewing or governing AI/ML models and training data, including licensing, provenance, and external distribution considerations
Experience owning or delivering multi-quarter technical roadmaps, including coordination across multiple teams and vendors
Experience leveraging AI assisted development tools (e.g., GitHub Copilot, LLM based agents) to improve engineering efficiency and automation
Proven contributions to open source projects or developer tooling, either publicly or within a large internal engineering ecosystem

Responsibilities

Set the enterprise technical and architectural direction for compliant opensource and open model usage across software, data, and AI/ML, defining scalable patterns and guardrails
Serve as the enterprise front line and escalation point for reviewing open software, AI models, and training data, especially externally facing use, ensuring adherence to license requirements and company policy
Drive delivery of the Open License Compliance and Model/Data Provenance roadmap, coordinating cross team execution, tracking progress, and escalating resource or funding gaps
Design and evolve compliance and third party risk controls as engineering systems, embedding them into CI/CD pipelines, developer platforms, and SDLC workflows to replace manual enforcement with automation
Lead tooling strategy and execution, including build vs buy decisions, vendor engagement, and adoption of SBOM, dependency management, and governance automation platforms, vendor engagement, and adoption of SBOM, dependency management, and governance automation platforms
Deliver hands-on engineering to build, integrate, and operate internal and customer facing compliance tooling, leveraging AI assisted development and coding agents to reduce friction and scale reviews
Provide senior technical authority and guidance, translating legal and regulatory requirements into developer friendly standards while raising enterprise maturity through education and reference architectures