Senior Information Security Engineering Analyst - Manual Access Provisioning Specialist

Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health optimization on a global scale. Join us to start Caring. Connecting. Growing together.

Position Summary: As a Manual Access Provisioning Specialist, you will play a critical role in ensuring the efficient and secure management of user access rights within our organization. You will be responsible for implementing client-specific provisioning strategies, directly collaborate with CISOs and senior security leaders, define and drive onboarding process for new businesses, facilitating knowledge transfer (KT), managing Standard Operating Procedures (SOPs), and preparing comprehensive metrics to track performance and identify areas for improvement.

Primary Responsibilities:

• Collaborate with clients and stakeholders to understand their unique access requirements and develop tailored provisioning strategies
• Implement provisioning processes and configurations to meet client-specific needs, ensuring compliance with security and regulatory standards. Provide ongoing support and troubleshooting for client provisioning issues
• Develop, maintain, and update comprehensive SOPs for manual access provisioning processes
• Stay up to date on the latest access control threats, trends, and best practices
• Ensure that SOPs are clearly communicated and followed by team members
• Regularly review and revise SOPs to reflect changes in technology, processes, or regulatory requirements
• Facilitate knowledge transfer sessions to train team members on new provisioning techniques, tools, and processes
• Create and maintain knowledge base articles and documentation to support ongoing learning and reference
• Ensure that team members have the necessary skills and knowledge to effectively execute provisioning tasks
• Prepare regular reports summarizing provisioning performance and recommendations for optimization
• MFA
  • Design, implement, and support Multi-Factor Authentication (MFA) solutions across on-prem, cloud, and hybrid environments
  • Enforce MFA policies for privileged, workforce, vendor, and remote access use cases
  • Integrate MFA with identity providers and authentication platforms (e.g., Entra ID / ADFS)
  • Troubleshoot MFA-related issues including enrollment, token failures, and conditional access errors
  • Support Zero Trust authentication patterns such as step-up authentication and risk-based access
• Single Sign-On (SSO) & Federation
  • Implement and manage SSO integrations for enterprise and third-party applications
  • Support identity federation using SAML, OAuth 2.0, OpenID Connect (OIDC), etc.
  • Configure and maintain ADFS / Entra ID federation, including trust relationships and claims rules
  • Provide integration support to application teams for onboarding applications to SSO
  • Perform certificate management activities related to SSO (token-signing, trust, and renewal)
• Comply with the terms and conditions of the employment contract, company policies and procedures, and any and all directives (such as, but not limited to, transfer and/or re-assignment to different work locations, change in teams and/or work shifts, policies in regards to flexibility of work benefits and/or work environment, alternative work arrangements, and other decisions that may arise due to the changing business environment). The Company may adopt, vary or rescind these policies and directives in its absolute discretion and without any limitation (implied or otherwise) on its ability to do so

• Graduate degree or equivalent experience
• 4+ years of experience in information security, with a focus on access management
• Proven experience in designing, implementing, and managing access control solutions
• Experience with manual provisioning processes, tools security frameworks (e.g., NIST CSF, ISO 27001)
• Solid understanding of identity and access management (IAM) concepts
• Proven excellent analytical and problem-solving skills
• Proven solid communication and interpersonal skills
• Demonstrated ability to work independently and as part of a team

• Proficiency in scripting languages (e.g., PowerShell)