Security Engineer - Certificate Mgt/ PKI - Remote or Hybrid from MN or DC
About The Position
The Enterprise Information Security (EIS) team is responsible for cybersecurity across our organization. We support our business and members by reducing risk, rapidly responding to threats, focusing on business resiliency and securing new acquisitions. Be a contributing member of the team responsible for Optum’s Digital Certificate Services Team focused on driving adoption of our enterprise certificate lifecycle management platform and digital certificate management practices into new businesses within the UnitedHealth Group portfolio. The focus of this position will be on collaborating with acquired entity IT support teams to partner, train, and support the use of the Optum enterprise digital certificate management platform and migrate certificate issuance to Optum trusted Certificate authorities. Secondary responsibilities include supporting our certificate lifecycle management platform in a restricted network enclave and supporting management of the public domain name portfolio. Collaborate with other IT teams to drive certificate automation and other certificate management best practices. Provide operational support in the day-to-day tasks involved with providing a centralized, enterprise certificate management platform and code signing service.
Requirements
- 2+ years of Windows Server administration experience
- 2+ years of Unix/Linux Server administration experience
- 2+ years of general network experience with emphasis on DNS, firewall, and proxy knowledge
- 2+ years of enterprise application platform operational support experience
- 1+ years of PKI, certificate management, or related experience working with x.509 digital certificates
- Scripting and automation experience leveraging Powershell, Python, or other scripting languages
- Experience with certificate lifecycle management platforms, with emphasis on Venafi products
- Ability to participate in on call rotation
Nice To Haves
- Undergraduate degree in applicable area of expertise or equivalent experience
- CISSP or other security related certification
- General Identity and Access Management technology experience
- Experience implementing digital certificates in applications, containers, or other platforms
Responsibilities
- Direct point of contact for acquired entities for public domain name and digital certificate migration, management, and automation
- Develop and distribute communications and training materials along with conducting training sessions
- Provide operations support for the enterprise certificate lifecycle management platform based on the CyberArk\Venafi Certificate Management Datacenter and Cloud platform including in Optum’s core network and the special restricted network enclave
- Provide operational support for the UHG public domain name portfolio including migration, acquisition, and divesting activities
- Collaborate with the team to engineer continuous service improvement and new features
- Support customer use of digital certificates leveraging best practices and automation
- Provide innovative solutions to automate repetitive tasks
- Participate as an independent contributor within an agile based team
- Participate in a 24x7 on call rotation supporting certificate operations
- Leverage enterprise-approved AI tools to enhance productivity and innovation by streamlining workflows and automating repetitive tasks
- Evaluate emerging trends to drive continuous improvement and strategic innovation
Benefits
- comprehensive benefits package
- incentive and recognition programs
- equity stock purchase
- 401k contribution
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Education Level
No Education Listed
