Sr Cybersecurity Analyst - Remote or Hybrid in MN and DC

Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by inclusion, talented peers, comprehensive benefits and career development opportunities.

Come make an impact on the communities we serve as you help us advance health optimization on a global scale. Join us to start Caring. Connecting. Growing together.

The Enterprise Information Security (EIS) team is responsible for cybersecurity across our organization. We support our business and members by reducing risk, rapidly responding to threats, focusing on business resiliency and securing new acquisitions.

United Health Group's Enterprise Security and Resilience Office (ESRO) is committed to building and maintaining the trust and confidence of our customers and stakeholders.

You’ll enjoy the flexibility to work remotely from anywhere within the U.S. as you take on some tough challenges. This position follows a hybrid schedule with four in-office days per week.

• Platform Engineering & Operations (Cyber Ark / Delinea / Vault)
• Engineer, administer, and maintain PAM and secrets management platforms (Cyber Ark, Delinea, Hashi Corp Vault) across development, test, and production environments
• Design and implement onboarding patterns for:
  • Privileged accounts (human and service accounts)
  • Application secrets (static and dynamic where supported)
  • Credential rotation / reconciliation workflow
  • Configure and maintain core PAM capabilities such as:
    • Vaulting and password rotation policies
    • Privileged session management / access workflows (where applicable)
    • Safe / folder / policy structures aligned to least privilege and audibility
• Implement and support integrations with enterprise identity and infrastructure services (e.g., directory services, MFA/SSO, PKI/certificates, endpoints, server platforms, cloud, CI/CD)
• Develop automation for onboarding and operations using scripting and APIs (e.g., Power Shell, Python, REST), including repeatable configuration and deployment patterns
• Partner with application teams to integrate Vault and PAM into SDLC/Dev Ops pipelines and reduce hard-coded secrets

This role participates in a one‑week on‑call rotation managed in Service Now and is responsible for ensuring PAM services are running smoothly with emphasis on service restoration.

You’ll be rewarded and recognized for your performance in an environment that will challenge you and give you clear direction on what it takes to succeed in your role as well as provide development for other roles you may be interested in.

• Undergraduate degree or 7+ years of equivalent experience
• 3+ years in IAM/PAM, security engineering (Cyber Ark, Delinea, Hashi Corp Vault), systems engineering, or infrastructure operations with direct responsibility for Enterprise production platforms

• Cyber Ark Defender or Sentry (PAM)
• Delinea Associate or Engineer
• Hashi Corp Vault Associate
• CompTIA Security
• Experience supporting production on‑call rotations and major incident response processes

• Cyber Ark Guardian
• Hashi Corp Vault Operations Professional
• CISSP or CISM

* All employees working remotely will be required to adhere to United Health Group's Telecommuter Policy

Pay is based on several factors including but not limited to local labor markets, education, work experience, certifications, etc. In addition to your salary, we offer benefits such as a comprehensive benefits package, incentive and recognition programs, equity stock purchase and 401(k) contribution (all benefits are subject to eligibility requirements). No matter where or when you begin a career with us, you’ll find a far‑reaching choice of benefits and incentives.

The salary for this role will range from $91,700 to $163,700 annually based on full‑time employment. We comply with all minimum wage laws as applicable.

Final date to receive applications:
This will be posted for a minimum of 2 business days or…