Information Security Engineer Consultant

Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health optimization on a global scale. Join us to start Caring. Connecting. Growing together.

We are seeking a Mid-Level Security Operations Engineer (PAM & Certificate Management) to support and operate Privileged Access Management (PAM), Vendor PAM (VPAM), and Certificate Lifecycle / PKI services across enterprise environments. This is a hands-on, operational role focused on securing privileged identities, managing digital certificates, and enforcing strong access controls, cryptographic hygiene, and regulatory compliance.

Primary Responsibilities:

• Privileged Access Management (PAM / VPAM)
  • Onboard, manage, and govern privileged accounts within PAM vaults
  • Administer and enforce password management and access control policies
  • Monitor, audit, and record privileged sessions
  • Deploy, configure, and harden PAM platform components
  • Manage PAM connectors, plugins, and integrations
  • Implement authentication integrations (LDAP, SAML, RADIUS)
  • Administer Active Directory security groups for access segregation
• Certificate Lifecycle Management & PKI Operations
  • Manage certificate issuance, renewal, replacement, revocation, and expiration
  • Proactively monitor certificate health to prevent outages
  • Troubleshoot certificate trust and validation issues
  • Support enterprise PKI and Certificate Authority services
  • Deploy certificates across servers, applications, and network devices
• Automation & Operations
  • Support automation for privileged access and certificate management
  • Perform basic scripting (PowerShell / Python)
  • Support incident response for access, certificate, or encryption issues
• Compliance & Governance
  • Enforce least-privilege and Zero Trust principles
  • Support audits with logs, reports, and evidence
  • Ensure compliance with enterprise security standards
• Comply with the terms and conditions of the employment contract, company policies and procedures, and any and all directives (such as, but not limited to, transfer and/or re-assignment to different work locations, change in teams and/or work shifts, policies in regards to flexibility of work benefits and/or work environment, alternative work arrangements, and other decisions that may arise due to the changing business environment). The Company may adopt, vary or rescind these policies and directives in its absolute discretion and without any limitation (implied or otherwise) on its ability to do so

• Bachelor's degree or equivalent experience
• 5+ years of infrastructure or security operations experience
• 3+ years hands-on PAM and/or PKI experience
• Active Directory administration experience
• Solid understanding of privileged access, PKI, TLS/SSL, and X.509

• Cloud certificate services experience
• Relevant security or infrastructure certifications
• Experience with Delinea, CyberArk, BeyondTrust, or One Identity
• Proven exposure to Vendor PAM (VPAM)