Senior Information Security Engineer Consultant

Job Description

Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health optimization on a global scale. Join us to start Caring. Connecting. Growing together.

Identity and Access Management (IAM) is a team in Enterprise Information Security (ESRO) division. The driving force behind IAM is to ensure that employees throughout Optum have the best experiences helping the right people or machines to access the right assets at the right time for the right reasons.

We are looking for a professional software engineer, who is passionate and hands-on developing solutions for IAM SSO services, it will require understanding and experience of PingFederate, Ping Access, Ping Directory, Azure SSO , Unix , scripting , experience with Authentication, Authorization , OIDC , SAML concepts implementation and zeal to learn IAM and SSO technologies frameworks.

Primary Responsibilities:

- Integrating Applications with Single Sign On (On-premises/cloud)
- Creating Modern solutions with state of art architecture and help in maintenance and optimization of SSO services
- Collaborate with Engineering, Operations and Devops teams to improve workflows, infrastructure and user experience
- Support and work alongside a cross-functional engineering team
- Work with open-source technologies as needed
- Brainstorm new products, updates, and solutions to continuously challenge and improve products, performance, system/data backup, security, and customer experience
- Remain up to date on industry trends, share knowledge among teams and abide by industry best practices.
- Occasional on call duty to support operational needs of IAM SSO service

- Comply with the terms and conditions of the employment contract, company policies and procedures, and any and all directives (such as, but not limited to, transfer and/or re-assignment to different work locations, change in teams and/or work shifts, policies in regards to flexibility of work benefits and/or work environment, alternative work arrangements, and other decisions that may arise due to the changing business environment). The Company may adopt, vary or rescind these policies and directives in its absolute discretion and without any limitation (implied or otherwise) on its ability to do so

Required Qualifications:

- Bachelor's/master's degree in CS, engineering, software engineering, or related field with solid analytical and problem-solving skills. Undergraduate degree or equivalent experience
- Experience or eager to learn Ping Access, Ping Federate, Ping Directory, Azure cloud or any other IAM tools
- Experience and understanding of cloud concepts like server/network virtualization
- Experience with Azure Graph API's to interact with Azure Applications, Identity and user information
- Experience with Identity Management and exposure to Identity Providers (IdP), Service Providers (SP), Single Sign-On (SSO), Security Assertion Markup Language (SAML), OAuth2, OpenID Connect (OIDC), Authentication, Authorization
- PowerShell, groovy scripting, Linux shell scripting, python scripting

- Trouble shoot and resolve issues in our dev, test, and production environments
- Up to date on the latest industry trends, able to articulate trends and potential clearly and confidently
- Proven ability to work independently with minimal direction
- Proven excellent verbal and written communication skills

Preferred Qualifications:

- Azure Certification
- Docker and Containers for deploying applications and Docker scripting would be added advantage.

---