Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by diversity and inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health equity on a global scale. Join us to start Caring. Connecting. Growing together

We are seeking a highly skilled and experienced Privileged Access Management (PAM) Administrator/Consultant to join our team. The ideal candidate will be responsible for the design, implementation, and administration of our Privileged Access Management (PAM) infrastructure. This role requires deep knowledge of PAM product(s) solution, including integration, security hardening, troubleshooting, and privileged account provisioning. The individual will work closely with internal teams and clients to ensure optimal performance, security, and compliance of privileged accounts.

Primary Responsibilities:

• Privileged Account Provisioning:
  • Onboard and manage privileged accounts within the Vault
  • Administer and enforce password management policies
• Session Management and Security:
  • Ensure continuous connectivity to target devices
  • Maintain and enforce security policies using AppLocker rules
  • Session Recording
• User Activity Auditing:
  • Monitoring, Logging and Audit actions performed by users with privileged accounts
• Deployment and Hardening:
  • Perform new installations and configurations, ensuring all product components (Vault, secret server, password manager, session manager, PTA, HA, Backup) adhere to hardening and security best practices
  • Tailor infrastructure based on client-specific needs, applying relevant security measures
• Connector and Plugin Management:
  • Manage and troubleshoot product connectors and plugins
  • Resolve issues related to custom plugins and ensure smooth integration with external systems
• Integration with Authentication Systems:
  • Implement and manage integrations with authentication protocols like LDAP, SAML, and RADIUS to streamline user access and authentication processes
• Active Directory (AD) Administration:
  • AD accounts onboarding, integration
  • Administer Active Directory to implement access segregation through security groups
  • Ensure correct mapping and enforcement of privileged access based on defined AD groups
• Collaborate with Security and IT Teams:
  • Work with cross-functional teams to ensure PAM product aligns with broader security policies and strategies
  • Provide recommendations to enhance the security of privileged access across the organization
• Comply with the terms and conditions of the employment contract, company policies and procedures, and any and all directives (such as, but not limited to, transfer and/or re-assignment to different work locations, change in teams and/or work shifts, policies in regards to flexibility of work benefits and/or work environment, alternative work arrangements, and other decisions that may arise due to the changing business environment). The Company may adopt, vary or rescind these policies and directives in its absolute discretion and without any limitation (implied or otherwise) on its ability to do so

Required Qualifications:

• Expertise in one or more PAM products: Delinea, CyberArk, One Identity, BeyondTrust etc.
• Solid hands-on experience with PAM – Delinea, CyberArk, One Identity, BeyondTrust components: Vault, secret server, password manager, session manager, PTA, HA, Backup
• Experience in PAM system deployments and infrastructure hardening
• Experience with authentication protocols like LDAP, SAML, RADIUS, and their integration with PAM product
• Deep understanding of security policies, especially related to privileged accounts
• Solid Active Directory administration skills for access management
• Proven ability to troubleshoot and resolve issues related to connectors, plugins, and other PAM integrations
• Familiarity with AppLocker and maintaining security policies in Windows environments
• Solid problem-solving skills and ability to work independently

Preferred Qualifications:

• Relevant PAM product certifications (Defender, Sentry, etc.)

At UnitedHealth Group, our mission is to help people live healthier lives and make the health system work better for everyone. We believe everyone–of every race, gender, sexuality, age, location and income–deserves the opportunity to live their healthiest life. Today, however, there are still far too many barriers to good health which are disproportionately experienced by people of color, historically marginalized groups and those with lower incomes. We are committed to mitigating our impact on the environment and enabling and delivering equitable care that addresses health disparities and improves health outcomes — an enterprise priority reflected in our mission.