Job Description

Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by diversity and inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health equity on a global scale. Join us to start Caring. Connecting. Growing together.



SCA is seeking an IAM developer with in-depth expertise in Azure AD SCIM provisioning and a comprehensive understanding of Identity Management APIs, including both SOAP and REST API endpoints, to design and implement provisioning / deprovisioning from Active Directory to 3rd party applications. The IAM developer will be responsible for automating user lifecycle management for the organization.



SCA is looking to hire a Identify and Access Management Engineer to help with supporting the planning, design, development and deployment of centralized identity and access management (IAM) solutions for the organization. This includes supporting identity management software solutions like Azure Active Directory as well as developing automation solutions for systems such as on-prem Active Directory, and Azure Active Directory.



Primary Responsibilities:


• Building RESTful API automation to provision / deprovision users in Python, PowerShell, or C#
• Documenting API automation
• Automating repetitive tasks using Selenium and ServiceNow's API
• Version Control - GIT
• Testing - Integration Testing, Functional Testing, Regression Testing
• Analysis of business processes and development of automation/scripting where applicable
• Administration of the IAM platform or internal applications requiring IAM
• Assist with managing a PAM solution such as CyberArk
• Managing and implementing single sign-on solutions utilizing federated technologies such as SAML2, OAuth2, OpenID Connect and LDAP
• Plan, analysis, design, implementation, and maintenance of all layers of IAM applications, including Authorization/Authentication and Account Creation/Management/Provisioning
• Engaging with external vendors to connect applications with SP/IdP-Initiated SSO while making business decisions on attribute level mappings per IAM best practices
• Configure API integrations between internal SaaS applications as it relates to IAM and attribute mappings/provisioning
• Managing and refining a Role Based Security framework, producing schema designs and operational plans for enforcement
• Support the planning and delivery of the enterprise-level IAM program
• Provide expertise on IAM key principles
• Work alongside application owners to develop application security roles within centralized IAM directories
• Develop role based access automation based on employee job titles/roles
• Comply with the terms and conditions of the employment contract, company policies and procedures, and any and all directives (such as, but not limited to, transfer and/or re-assignment to different work locations, change in teams and/or work shifts, policies in regards to flexibility of work benefits and/or work environment, alternative work arrangements, and other decisions that may arise due to the changing business environment). The Company may adopt, vary or rescind these policies and directives in its absolute discretion and without any limitation (implied or otherwise) on its ability to do so

Required Qualifications:


• Experience of 3+ years as IAM developer or Engineer
• RESTful API Knowledge - API calls, API responses, API documentation
• Programming Languages - Python, PowerShell, C#
• Automation Experience - ServiceNow API, Selenium
• Version Control - GIT
• Testing - Integration Testing, Functional Testing, Regression Testing


Preferred Qualifications:


• Bachelor's Degree in Computer Information Systems or other technology-related fields
• Identity Management Concepts - Identity Providers (IdP), Service Providers (SP), Single Sign-On (SSO), Security Assertion Markup Language (SAML), OAuth2, OpenID Connect (OIDC)
• Python testing frameworks such as unit test, pytest
• Azure DevOps - deploying Python or C# apps in Azure
• Code reviews - experience reviewing other developer's code in an enterprise environment


•At UnitedHealth Group, our mission is to help people live healthier lives and make the health system work better for everyone. We believe everyone-of every race, gender, sexuality, age, location and income-deserves the opportunity to live their healthiest life. Today, however, there are still far too many barriers to good health which are disproportionately experienced by people of color, historically marginalized groups and those with lower incomes. We are committed to mitigating our impact on the environment and enabling and delivering equitable care that addresses health disparities and improves health outcomes -- an enterprise priority reflected in our mission.•