Principal Software Engineer - Remote

UnitedHealth Group•Eden Prairie, MN

3d•Remote

About The Position

Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health optimization on a global scale. Join us to start Caring. Connecting. Growing together. The Optum Technology Digital team is on a mission to disrupt the healthcare industry, transforming UHG into an industry-leading Consumer brand. We deliver hyper-personalized digital solutions that empower direct-to-consumer, digital-first experiences, educating, guiding, and empowering consumers to access the right care at the right time. Our mission is to revolutionize healthcare for patients and providers by delivering cutting-edge, personalized and conversational digital solutions. We’re Consumer Obsessed, ensuring they receive exceptional support throughout their healthcare journeys. As we drive this transformation, we're revolutionizing customer interactions with the healthcare system, leveraging AI, cloud computing, and other disruptive technologies to tackle complex challenges. Serving UnitedHealth Group's digital technology needs, the Consumer Engineering team impacts millions of lives through UnitedHealthcare & Optum. The Optum Technology Chief Digital Office (CDO) Leadership team is transforming Optum to be an industry-leading Consumer brand. We are on a journey towards delivering a best-in-the-industry consumer experience to our patients and providers by delivering personalized digital solutions that support our consumers throughout their healthcare journeys. This team is transforming to meet the moment – to begin radically altering the way our customers engage with the healthcare system using modern tech to solve some of the most complex problems experienced along the way. Serving all of UnitedHealth Group’s digital technology needs, the CDO team is responsible for driving outcomes across nearly 30 million+ human lives with UnitedHealthcare insurance, a number which puts UHC at the top of the pack as the largest managed care provider in the United States. Aikyam is the most advanced “Identity as a Service” Platform at UnitedHealth Group that is aimed to provide a central and universal user identity for identifying and authenticating a user in the healthcare domain. It is built upon open standards like OAuth 2.0, OpenID Connect, SAML 2.0 Web SSO etc. It is a highly available, reliable and scalable service hosted in public cloud. We enjoy the trust of large customers in healthcare industry and government services with operations across United States of America. You’ll enjoy the flexibility to work remotely from anywhere within the U.S. as you take on some tough challenges. For all hires in the Minneapolis or Washington, D.C. area, you will be required to work in the office a minimum of four days per week. Locations in DC or MN they will be required to be onsite 4 days per week. All other locations are remote. You’ll be rewarded and recognized for your performance in an environment that will challenge you and give you clear direction on what it takes to succeed in your role as well as provide development for other roles you may be interested in.

Requirements

8+ years of hands-on technical experience in implementing secure large-scale enterprise applications or SaaS platforms using cloud technologies
6+ years of relevant experience in Identity & Access Management and Information Security
3+ years of experience in OAuth 2.0, OpenID Connect, SAML 2.0, Identity federation, Single Sign-On, RBAC, ABAC, MFA, RBA, and Passwordless
3+ years of experience in Threat, Vulnerability & Risk management, Infrastructure security
3+ years of development experience on Java, SpringBoot, RESTful Web Services and Microservices
3+ years of experience in Scripting languages (Python and PowerShell)
3+ years of experience in web application architectures, TCP/IP networking, cloud computing and data integrity and confidentiality including cryptographic techniques
2+ years of demonstrable experience in Site Reliability Engineering and DDoS mitigation techniques
2+ years/knowledge of Web Application Firewalls, HTTP(s), TCP/UDP, SSL/TLS, Forward and reverse proxies, Load balancers
2+ years/knowledge of SANS Top 20 Critical Security Controls and OWASP Top 10 vulnerabilities

Nice To Haves

Implementation of Technology specifications and/or RFCs
AWS Certifications
Hands-on working experience with SailPoint, ForgeRock, Ping, Okta, OneLogin, Azure AD or similar IAM product development
Experience in implementing Security Analytics using AI and machine learning
Experience in healthcare industry applications development and support
Familiarity with security, privacy and compliance standards such as FISMA, FedRAMP, HIPAA, NIST800-53, NIST800-63 and GDPR

Responsibilities

Plan, define, design, implement and maintain the solution architecture in the area of internal and external identity & access management solution in public and private cloud environments
Adopt, implement and define guidelines using open standard identity protocols and mechanisms such as OAuth 2.0/ OpenID Connect, SAML 2.0, Federated Identity Management and SSO
Assess overall Identity platform and cloud security posture at frequent intervals. Redesign or evolve the posture as necessary
Researches, Implements and promotes the adoption of proactive security concepts, such as threat hunting and threat modelling to improve the existing security strategy
Drive architectural initiatives that align our business needs and technical capabilities for Identity Management solutions