Principal Network Engineer

Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health optimization on a global scale. Join us to start Caring. Connecting. Growing together.

As a Principal Information Security Engineer your responsibilities involve monitoring, evaluating, and maintaining systems and procedures to safeguard internal information systems, networks, databases, and web-based security. You will conduct vulnerability assessments and monitor systems, network, databases, and the web for potential system breaches and make recommendations and implement changes to enhance system security and prevent unauthorized access including researching security trends, new methods and techniques used in unauthorized access of data to preemptively eliminate the possibly of a system breach.

Primary Responsibilities:

• Maintain a large inventory of application delivery controllers and web application firewalls using products such as F5, A10, and Cloudflare alongside a global team of engineering colleagues
  
• Positively contribute to over 99.99%+ application uptime by deploying load balancers, configuring load balanced applications, and securing external cloud and on-prem applications with WAF, DDoS, BoT, and API protections
  
• Effectively troubleshoot complex layer 1-7 issues while clearly and concisely communicating status updates to stakeholders until resolution using tools like Wireshark, tcpdump, curl, postman, browser dev tools, linux command line, etc.
  
• Execute assigned projects in a timely manner without causing application impact while following change control process requirements. Projects such as: load balancer software or hardware upgrades, onboarding applications to Web App Firewalls, migrating applications along with WAF to cloud infrastructures, deploying SSL/TLS inspection, automating secure solutions at scale, amongst others
  
• Engineer innovative ways to solve problems and build helpful tools using scripting/automation focus with a software engineering mindset. Able to automate repeatable tasks using scripting languages like perl or python to interact directly with platform APIs and/or using tools like Terraform, Ansible, Chef, Puppet, Jenkins, etc will be an added advantage
  
• Respond to high priority on-call engagements within 15 minutes in a rotation one out of every 4 weeks from 8am to 8pm CST as part of the senior escalation engineer rotation. Able to work occasional weekends and nights during off hour change windows as necessary to support the business
• Comply with the terms and conditions of the employment contract, company policies and procedures, and any and all directives (such as, but not limited to, transfer and/or re-assignment to different work locations, change in teams and/or work shifts, policies in regards to flexibility of work benefits and/or work environment, alternative work arrangements, and other decisions that may arise due to the changing business environment). The Company may adopt, vary or rescind these policies and directives in its absolute discretion and without any limitation (implied or otherwise) on its ability to do so

Required Qualifications:

• Undergraduate degree or equivalent experience
  
• 8+ years of experience architecting, supporting, maintaining, configuring, and securing IT infrastructure
  
• 5+ years of experience troubleshooting, configuring, architecting, and maintaining application delivery controllers (at least 2 years with F5 load balancers plus other load balancers such as A10, Nginx, Citrix, AVI, Kemp, HAProxy, Barracuda, etc.)
  
• 3+ years of experience securing cloud native applications in Azure, GCP, or AWS with WAF, DDoS, Bot, and API protections using cloud WAF CDN tools such as Cloudflare, Imperva, Akamai, F5 XC, etc.
  
• 3+ years of experience automating network infrastructure tasks using scripting languages like perl or python to interact directly with platform APIs and/or using tools like Terraform, Ansible, Chef, Puppet, Jenkins, etc.
  
• 2+ years of experience troubleshooting and maintaining other network or security appliances (switches, routers, firewalls, proxies, etc.)
  
• 2+ years of experience securing applications with web application firewalls using F5 ASM / AWAF module

Preferred Qualification:

• Advanced knowledge of HTTP, SSL/TLS encryption, DNS, switching and routing, Application Security, mitigating OWASP top 10 security threats, DDoS and BoT attacks, protecting APIs, and CDN caching policies

At UnitedHealth Group, our mission is to help people live healthier lives and make the health system work better for everyone. We believe everyone–of every race, gender, sexuality, age, location and income–deserves the opportunity to live their healthiest life. Today, however, there are still far too many barriers to good health which are disproportionately experienced by people of color, historically marginalized groups and those with lower incomes. We are committed to mitigating our impact on the environment and enabling and delivering equitable care that addresses health disparities and improves health outcomes - an enterprise priority reflected in our mission.