Lead Java Software Engineer - Remote

Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by diversity and inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health equity on a global scale. Join us to start Caring. Connecting. Growing together. 

Software engineering in Identity & Access Management is the application of engineering to the design, development, implementation, testing and maintenance of software related to identity in a systematic method. The specialized roles in this function will cover all primary quality engineering activity across all technology functions that ensure we deliver code with high quality for our applications, products and services and to understand customer needs and to develop product roadmaps related to consumer identity & access management.These roles include, but are not limited to analysis, design, coding, engineering, testing, debugging, standards, methods, tools analysis, documentation, research and development, maintenance, new development, operations and delivery. With every role in the company, each position has a requirement for building quality into every output. This also includes evaluating new tools, new techniques, strategies; Automation of common tasks; build of common utilities to drive organizational efficiency with a passion around technology and solutions and influence of thought and leadership on future capabilities and opportunities to apply technology in new and innovative ways.

You’ll enjoy the flexibility to work remotely * from anywhere within the U.S. as you take on some tough challenges. 

Primary Responsibilities: 

• Coordinates, supervises and is accountable for the daily activities of business support, technical or production team or unit wrt to quality standards
• Design, implement, and maintain IAM technologies to ensure compliance with privacy and audit regulations
• Identify and resolve technical issues related to IAM
• Ensure that IAM systems comply with industry regulations and security requirements
• Possess a solid understanding of IAM and tools within their domain
• Understand IAM outside their domain and the impact of their work on others
• Contribute advanced knowledge to the development of engineering best practices within IAM
• Contribute to the architecture of IAM solutions, considering scalability, security, and usability requirements
• Lead the design, implementation, and management of the organization’s IAM systems and processes
• Stay updated with the latest IAM technologies, trends, and emerging threats, implementing necessary measures to mitigate risks
• Lead collaboration with third-party vendors and partners to evaluate IAM tools and services
• Demonstrate advanced skills in requirements gathering and align technical objectives with business objectives
• Troubleshoot or analyze advanced process issues, identify causes, recommend efficiencies, or provide formal reporting
• Provide suggestions to higher-level staff on resolving new or complex issues
• Provide technical leadership, guidance, and mentorship within their IAM Domain
• Exhibit an appetite for continuous learning and improvement
• Impact of work is most often at the team level

You’ll be rewarded and recognized for your performance in an environment that will challenge you and give you clear direction on what it takes to succeed in your role as well as provide development for other roles you may be interested in. 

Required Qualifications: 

• 5+ years of experience in backend software engineering with Java and Spring Boot (Spring MVC, Spring Security, Spring Data)
• 3+ years of experience with OAuth 2.0 / OIDC / SAML 2.0 protocols and identity platform development
• 3+ years of experience designing and operating microservices on AWS (EKS, ALB, SES/SNS, Secrets Manager, ECR)
• 3+ years of experience with Redis (caching, session management, key-pattern design)
• 3+ years of experience with CI/CD pipelines -- Jenkins and/or GitHub Actions -- including Docker image builds and Kubernetes/Helm deployments
• 3+ years of experience with relational databases (PostgreSQL / MySQL) and schema migration tooling (Liquibase or Flyway)
• 3+ years of experience working in an Agile/Scrum environment
• 2+ years of experience with JWT / JOSE standards (JWS, JWE, JWK)
• Proven experience leading technical design and mentoring engineers on a team

Preferred Qualifications:

• Bachelor's or Master's degree in Computer Science, Engineering, or a related field
• Hands-on experience with Spring Cloud Config Server and multi-environment configuration management
• Experience with Spring Authorization Server or Keycloak as an OIDC provider
• Experience in the healthcare or financial services industry with exposure to regulatory compliance (HIPAA, SOC 2)
• Experience with Harness or similar GitOps-based deployment orchestration platforms
• Knowledge or exposure to AI, GenAI, or LLMs applied to identity and access management use cases
• Familiarity with FAPI (Financial-grade API) or SCIM 2.0 standards
• Proven contributions to open-source identity or security projects

*All employees working remotely will be required to adhere to UnitedHealth Group’s Telecommuter Policy 

Pay is based on several factors including but not limited to local labor markets, education, work experience, certifications, etc. In addition to your salary, we offer benefits such as, a comprehensive benefits package, incentive and recognition programs, equity stock purchase and 401k contribution (all benefits are subject to eligibility requirements). No matter where or when you begin a career with us, you’ll find a far-reaching choice of benefits and incentives. The salary for this role will range from $112,700 - $193,200 annually based on full-time employment. We comply with all minimum wage laws as applicable.

Application Deadline: This will be posted for a minimum of 2 business days or until a sufficient candidate pool has been collected. Job posting may come down early due to volume of applicants.

At UnitedHealth Group, our mission is to help people live healthier lives and make the health system work better for everyone. We believe everyone–of every race, gender, sexuality, age, location and income–deserves the opportunity to live their healthiest life. Today, however, there are still far too many barriers to good health which are disproportionately experienced by people of color, historically marginalized groups and those with lower incomes. We are committed to mitigating our impact on the environment and enabling and delivering equitable care that addresses health disparities and improves health outcomes — an enterprise priority reflected in our mission.   

UnitedHealth Group is an Equal Employment Opportunity employer under applicable law and qualified applicants will receive consideration for employment without regard to race, national origin, religion, age, color, sex, sexual orientation, gender identity, disability, or protected veteran status, or any other characteristic protected by local, state, or federal laws, rules, or regulations. 

UnitedHealth Group is a drug - free workplace. Candidates are required to pass a drug test before beginning employment.