Optum logo
Optum

Optum, part of the UnitedHealth Group family of businesses, is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health optimization on a global scale. Join us to start Caring. Connecting. Growing together. At Optum, we support your well-being with an understanding team, extensive benefits and rewarding opportunities. By joining us, you’ll have the resources to drive system transformation while we help you take care of your future. We recognize the power of connection to drive change, improve efficiency and make a difference in health care. Join a team where your skills and ideas can make an impact and where collaboration is key to creating technology that produces healthier outcomes.

Certificate MGMT or Microsoft PKI Engineer

EngineerEngineerFull TimeRemoteSeniorTeam 160,000Since 2011Company Site

Location

Philippines

Posted

7 days ago

Salary

0

Seniority

Senior

English

Job Description

Certificate MGMT or Microsoft PKI Engineer

Optum

Requisition Number: 2352031 Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health optimization on a global scale. Join us to start Caring. Connecting. Growing together. Positions in this function design, engineer, and manage the organization's infrastructure and operational platforms. From a cloud services model, this includes services commonly thought of as IaaS and PaaS and their underlying foundational components. Additionally, this function also has responsibility for traditional enterprise infrastructure and operational platforms such as email, file transfer, and collaboration technologies, among others. This role must understand functional and non-functional requirements to ensure they can be achieved through system design and engineering to meet the needs of the customers. Work closely with business and technology stakeholders to develop roadmaps for their respective technology portfolios, resolve cross-system and domain dependencies, ensure effective integration among the services offered to the end customer, and efficient usage of infrastructure and operational platforms. Monitor technological advancements and industry trends to influence company standards and ensure that solutions are continuously improved and maintained through product management practices, including recommendations to invest in a solution or retirement of redundant or out-of-date systems. Understand the interactions between systems, the applications and services hosted, and evaluate the impact of changes and additions. Perform analysis on existing systems to ensure performance and reliability, enhance scalability, meet security requirements, and interoperable and maintainable technology portfolio. Primary Responsibilities: - Certificate & PKI Administration - Administer and support enterprise PKI infrastructure, including Root and Issuing CAs. - Manage certificate issuance, renewal, revocation, and retirement for: - Internal server certificates - External/public TLS certificates - Load balancers, proxies, and gateways - Application and service certificates - Maintain certificate templates, enrollment policies, and validity standards. - Operate and monitor CRL, OCSP, and certificate distribution endpoints. - Perform routine PKI health checks, audits, and lifecycle reviews. - Certificate Lifecycle Operations - Proactively monitor certificate expiration across environments and prevent outages. - Execute planned certificate rotations with zero or minimal downtime. - Respond to certificate-related incidents, including expired, misconfigured, or revoked certificates. - Maintain certificate inventory, ownership metadata, and renewal methods. - Support external CA interactions for publicly trusted certificates (e.g., domain validation, reissuance). - Automation & Operational Enablement - Leverage existing automation tools and platforms to streamline: - Certificate renewals - Certificate deployment to servers, load balancers, and platforms - Perform light scripting (PowerShell, shell, or Python) for: - Operational automation - Reporting - Certificate discovery - Work with automation and platform teams to integrate certificate management into: - Infrastructure workflows - Load balancer or ingress updates - Maintain and execute runbooks for automated and manual certificate processes. - Note: This role does not require building complex applications or frameworks. Automation is focused on operational reliability and efficiency, not software development. - Compute & Platform Integration - Install, update, and maintain certificates on: - Windows and Linux servers - Web servers (IIS, Apache, Nginx) - Reverse proxies and load balancers (F5, HAProxy, Citrix, etc.) - Support certificate needs for: - Virtual machines - Container platforms (Kubernetes, OpenShift - operational use) - Cloud workloads - Coordinate with network and security teams to implement TLS standards and policies. - Governance, Risk & Compliance - Ensure certificates meet enterprise standards for: - Key sizes - Algorithms - Validity periods - Naming conventions and SAN rules - Support audits and compliance activities (SOX, PCI, ISO, internal security reviews). - Maintain documentation for PKI architecture, renewal processes, and operational procedures. - Analyzes and investigates - Provides explanations and interpretations within area of expertise - Comply with the terms and conditions of the employment contract, company policies and procedures, and any and all directives (such as, but not limited to, transfer and/or re-assignment to different work locations, change in teams and/or work shifts, policies in regards to flexibility of work benefits and/or work environment, alternative work arrangements, and other decisions that may arise due to the changing business environment). The Company may adopt, vary or rescind these policies and directives in its absolute discretion and without any limitation (implied or otherwise) on its ability to do so Required Qualifications: - Undergraduate degree or equivalent experience. - 5+ years in compute, infrastructure, or systems administration - 3+ years hands on experience managing PKI and certificate services - 3+ years hands on experience managing certificates and PKI in production environments - Proven experience supporting infrastructure platforms at scale - Solid operational experience with: - Certificate issuance and renewals - Internal and external certificates - Enterprise infrastructure environments - Technical Skills (Administrator-Level) - Experience administering Microsoft AD CS and/or enterprise PKI tools. - Hands on experience deploying certificates to: - Windows/Linux servers - IIS, Apache, Nginx - Load balancers or reverse proxies - Hands on administration of: - Microsoft AD CS or similar PKI platforms - Windows and Linux server environments - Experience managing certificates on: - Web servers (IIS, Apache, Nginx) - Load balancers or reverse proxies - Solid understanding of: - X.509 certificates - TLS / HTTPS - Certificate chains and trust models - Certificate chaining and trust relationships - Familiarity with certificate tooling such as: - Venafi, Keyfactor, AppViewX, DigiCert, Sectigo (any one or more) - Working knowledge of: - PowerShell and/or basic Python or shell scripting - ITSM tools (e.g., ServiceNow) - Basic scripting for administrative automation - Familiarity with enterprise certificate platforms (any of): - Venafi - Keyfactor - AppViewX - DigiCert / Sectigo Preferred Qualifications: - Experience with cloud certificate services (AWS ACM, Azure Key Vault Certificates). - Operational experience with Kubernetes certificates (supporting cert manager or ingress certs) - Experience using ITSM tools (ServiceNow or similar) - Exposure to Kubernetes certificate administration (cert-manager from an ops perspective). - Exposure to cloud compute certificate services (AWS ACM, Azure Key Vault Certificates) - Background supporting regulated or audited environments - Familiarity with: - HSM-backed key storage - Code-signing certificates - Device or service identity certificates - Security or infrastructure certifications At UnitedHealth Group, our mission is to help people live healthier lives and make the health system work better for everyone. We believe everyone-of every race, gender, sexuality, age, location and income-deserves the opportunity to live their healthiest life. Today, however, there are still far too many barriers to good health which are disproportionately experienced by people of color, historically marginalized groups and those with lower incomes. We are committed to mitigating our impact on the environment and enabling and delivering equitable care that addresses health disparities and improves health outcomes - an enterprise priority reflected in our mission. Optum is a drug-free workplace. © 2026 Optum Global Solutions (Philippines) Inc. All rights reserved.

Related Categories

Related Job Pages

More Engineer Jobs

Senior Software Engineer

Nearmap

Nearmap is dedicated to empowering insurance, commercial enterprises, and government agencies through various local intelligence solutions, including high-resol

Engineer8 days ago

Role Description As a Senior Software Engineer on the Insurance Applications team, you will design, build, and deliver software solutions that power Nearmap’s insurance business spanning APIs, microservices, relational databases, and messaging infrastructure. You’ll partner closely with Product to shape technical direction. Our backend is built on Node.js and C#: A microservices architecture with complex workflows orchestrated through RabbitMQ and backed by PostgreSQL. The system ingests data from diverse sources, including Nearmap's own, to deliver high-value insights to our customers. This role focuses on backend services, messaging strategy, and database design. At Nearmap, engineers move across teams and projects as business needs evolve. We value versatility, leadership, and a willingness to tackle problems across the full stack. You may be presented with opportunities to collaborate with teams working in Go, so a desire to learn new technologies is a plus. Qualifications - 5+ years professional software engineering experience. - Excellent verbal, written and visual communication skills. - Positive self-starter. - Strong problem-solving skills. - Customer service focus, both internal and external. - Sufficient humility to be wrong, own up and learn from mistakes. Requirements - C#, NodeJS/JavaScript. - Microservice and API design. - Working with cloud environments (AWS preferred). - Relational databases (PostgreSQL preferred). - Messaging systems (RabbitMQ preferred). Benefits - Flexible time off, including 4 extra "YOU" days off each year - take a break, no questions asked! - Company-sponsored volunteering days to give back. - Generous parental leave policies for growing families. - Work from Overseas Policy - explore the world in the approved list of cities while you work! - Discounted Private Health Insurance plans. - Monthly wellbeing and technology allowance. - A Nearmap subscription (naturally!).

United States
Alight Solutions logo

GTM Engineer-Low Code Automation

Alight Solutions

Alight Inc. (NYSE: ALIT) is a leading cloud-based human capital technology and services provider

Engineer8 days ago
OtherRemoteTeam 10,001+Since 2016H1B Sponsor

Role Description Join Alight as a Go-To-Market Engineer, where you will design and operate low‑code, automated revenue systems that connect buying signals to action at scale. This role focuses on building always‑on outbound and lifecycle workflows using visual tooling, enrichment platforms, and CRM automation—reducing manual work while enabling highly personalized engagement across the buyer journey. As a GTM Engineer, you will serve as the system builder behind modern GTM execution, translating revenue strategy into orchestrated workflows that power prospecting, enrichment, routing, and outreach across Sales and Marketing. This role is ideal for someone who thrives in automation, tooling, and experimentation rather than traditional CRM administration or heavy software engineering. Responsibilities - Low‑Code GTM System Design - Build automated outbound and lifecycle systems that replace manual list‑based prospecting with trigger‑based workflows. - Design visual, multi‑step workflows that connect signal detection, enrichment, and CRM orchestration. - Data Enrichment & Signal Orchestration - Architect enrichment workflows that append firmographic, role‑based, and behavioral data to leads and accounts. - Use spreadsheet‑driven logic and enrichment tables to manage segmentation and targeting at scale. - CRM Customization & Automation - Customize CRM user interfaces, custom fields, and native automations to align with GTM processes. - Ensure clean handoffs between automation systems and CRM workflows. - Sequencing & Outreach Automation - Configure and manage outreach sequences that enable personalized, scalable engagement. - Automate follow‑ups, task creation, and campaign triggers across outbound and lifecycle motions. - Tool Integration & Monitoring - Integrate GTM tools using low‑code connectors and visual automation platforms rather than custom API development. - Monitor workflow execution, troubleshoot failures, and continuously optimize system performance. - Optimization & Enablement - Optimize revenue systems to improve conversion rates, response times, and seller productivity. - Document workflows and provide enablement so GTM teams understand how systems operate. Qualifications - Bachelor’s degree or equivalent practical experience. - Experience building GTM workflows using low‑code or no‑code automation tools. - Strong proficiency with spreadsheets for data manipulation, enrichment, and segmentation. - Hands‑on experience customizing CRMs and configuring native automations. - Ability to translate GTM strategy into scalable, visual system designs. Preferred Qualifications - Experience with enrichment and orchestration platforms (e.g., Clay or similar tools). - Experience with automation platforms such as Make or Zapier. - Familiarity with outbound sequencing tools (e.g., Instantly, Smartlead, Outreach). - Experience using browser extensions or scraping tools for data extraction. - Understanding of B2B outbound motions and lifecycle marketing. Experience - 3–6+ years in Revenue Operations, Marketing Operations, Growth Operations, or GTM Systems roles. - Demonstrated success building automated GTM systems that reduce manual effort and improve revenue outcomes. Work Environment - Remote‑first, collaborative environment with cross‑functional partners in Sales, Business Development, and RevOps. - Fast‑paced, experimental culture focused on automation, iteration, and measurable impact. - High ownership and autonomy over GTM systems and tooling. Application and Interview By applying for a position with Alight, you understand that, should you be made an offer, it will be contingent on your undergoing and successfully completing a background check consistent with Alight’s employment policies. Our commitment to Inclusion We celebrate differences and believe in fostering an environment where everyone feels valued, respected, and supported. We know that diverse teams are stronger, more innovative, and more successful. Equal Opportunity Policy Statement Alight is an Equal Employment Opportunity employer and does not discriminate against anyone based on sex, race, color, religion, creed, national origin, ancestry, age, physical or mental disability, medical condition, pregnancy, marital or domestic partner status, citizenship, military or veteran status, sexual orientation, gender, gender identity or expression, genetic information, or any other legally protected characteristics or conduct covered by federal, state, or local law. Salary Pay Range - Minimum: 95,000.00 USD - Maximum: 130,000.00 USD

United States
$95K - $130K / year
Johnson Controls logo

Equipment Complex Project Engineer II

Johnson Controls

Transforming the buildings where people live, work, learn and play to become smarter, healthier and more sustainable.

Engineer8 days ago
Full TimeRemoteTeam 10,001+Since 1885H1B Sponsor

• The HVAC Equipment Complex Projects Engineer is part of our Building Solutions North America business at Johnson Controls. • Join our team of Engineers designing larger, more complex HVAC Equipment projects for our customers throughout the U.S. • You will support complex equipment projects and ensure they are completed accurately, on-time, within the scope of the contract and in alignment with customer expectations. • Work with the sales team and project management to maintain an effective balance between data center customer satisfaction and project financial results. • Manage project Profit and Loss (P&L) and customer satisfaction for all projects assigned. • Work closely with various branch administrations to manage backlog execution, schedule, and forecast the execution of projects up to two years in advance. • Actively manage project turnover process between equipment sales and equipment order execution. • Interpret engineering drawings and specifications to develop and provide engineered equipment submittals in compliance with contract drawing, site coordination, and site installation requirements. • Follows standardized submittal generation guidelines for preparation and processing of engineering submittals. • Evaluate the contractual scope of supply and the impact of client-issued bulletins, field directives, and/or scheduling changes. • Coordinate with other project team members to ensure cross scope items are identified, assigned, and correctly managed to ensure project success and customer satisfaction. • Perform associated cost estimates, prepares proposals, and works with sales in negotiating final settlement price and customer acceptance resulting from scope of supply changes/change orders. • Coordinate the factory equipment order process to ensure technical and commercial compliance with contract documents. • Generate technical content of Purchase Orders for field purchased materials and equipment. • Select, order, and track the delivery of materials and equipment for assigned projects. • Coordinate with logistics to meet factory and project schedule requirements and reviews the equipment order status reports as needed.

New York + 2 moreAll locations: New York | Texas | Virginia
$85K - $125K / year
Humana logo

Identity and Access Management Engineer 1

Humana

Louisville, Kentucky-based Humana is a leading healthcare company that offers a variety of health, wellness, and insurance products and services designed to off

Engineer8 days ago

Role Description The Identity and Access Management (IAM) Engineer 1 is responsible for performing core IAM functions supporting end-user access across enterprise systems. This role handles access provisioning, modifications, deprovisioning, and account disablement while ensuring compliance with internal security policies and regulatory requirements. This is a junior role where assignments are generally straightforward to moderately complex. Location: Louisville, KY; Washington, DC; Fort Lauderdale, FL; Tampa, FL; Dallas, TX; New York, NY; Atlanta, GA; Boston, MA; Chicago, IL; Charlotte, NC Work Arrangement: Work-at-Home (WAH) Key Responsibilities - Execute identity and access management tasks, including: - Access provisioning (additions, modifications, deletions) - Account disablement and reinstatement - Processing access changes - Troubleshoot and resolve end-user access issues across various systems - Validate roles and entitlements, ensuring alignment with business and security requirements - Identify inconsistencies in role entitlements and recommend/implement resolutions - Conduct user access recertification reviews in accordance with company policies - Support provisioning workflows and collaborate with internal provisioning teams - Handle “Self Service / ISE” (Identity Self Enablement) related tasks - Maintain strict confidentiality and security standards when managing sensitive access data - Assess urgency of access-related requests and prioritize accordingly - Follow documented procedures, policies, and compliance standards with some interpretation Qualifications - Bachelor's degree - Less than 3 years of cyber security experience - Experience integrating Security Policies, virtual access and controls - Experience integrating Cyber Security technologies with existing technologies - Skilled at performing identity and access management tasks related to end user access, such as access additions, modifications, deletions - Strong ability to assess urgency and prioritization and make good decisions based upon situational circumstances - Excellent communication skills with the ability to influence others - Analytical and problem-solving skills - Must be passionate about contributing to an organization focused on continuously improving consumer experiences Preferred Qualifications - Industry certifications such as: - CISA (Certified Information Systems Auditor) - CISSP (Certified Information Systems Security Professional) - CISM (Certified Information Security Manager) - CCSP (Certified Cloud Security Professional) - HCISPP (Healthcare Information Security and Privacy Practitioner) Benefits - Health benefits effective day 1 - Paid time off, holidays, volunteer time and jury duty pay - Recognition pay - 401(k) retirement savings plan with employer match - Tuition assistance - Scholarships for eligible dependents - Parental and caregiver leave - Employee charity matching program - Network Resource Groups (NRGs) - Career development opportunities Work-At-Home Requirements - At minimum, a download speed of 25 Mbps and an upload speed of 10 Mbps is required; wireless, wired cable or DSL connection is suggested. - Satellite, cellular and microwave connection can be used only if approved by leadership. - Employees who live and work from Home in the state of California, Illinois, Montana, or South Dakota will be provided a bi-weekly payment for their internet expense. - Humana will provide Home or Hybrid Home/Office employees with telephone equipment appropriate to meet the business requirements for their position/job. - Work from a dedicated space lacking ongoing interruptions to protect member PHI / HIPAA information. Scheduled Weekly Hours 40 Pay Range The compensation range below reflects a good faith estimate of starting base pay for full time (40 hours per week) employment at the time of posting. The pay range may be higher or lower based on geographic location and individual pay will vary based on demonstrated job related skills, knowledge, experience, education, certifications, etc. $55,200 - $75,300 per year

United States
$55.2K - $75.3K / year
Job Closed