Certificate MGMT or Microsoft PKI Engineer

Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health optimization on a global scale. Join us to start Caring. Connecting. Growing together. Positions in this function design, engineer, and manage the organization's infrastructure and operational platforms. From a cloud services model, this includes services commonly thought of as IaaS and PaaS and their underlying foundational components. Additionally, this function also has responsibility for traditional enterprise infrastructure and operational platforms such as email, file transfer, and collaboration technologies, among others. This role must understand functional and non-functional requirements to ensure they can be achieved through system design and engineering to meet the needs of the customers. Work closely with business and technology stakeholders to develop roadmaps for their respective technology portfolios, resolve cross-system and domain dependencies, ensure effective integration among the services offered to the end customer, and efficient usage of infrastructure and operational platforms. Monitor technological advancements and industry trends to influence company standards and ensure that solutions are continuously improved and maintained through product management practices, including recommendations to invest in a solution or retirement of redundant or out-of-date systems. Understand the interactions between systems, the applications and services hosted, and evaluate the impact of changes and additions. Perform analysis on existing systems to ensure performance and reliability, enhance scalability, meet security requirements, and interoperable and maintainable technology portfolio.

Certificate & PKI Administration Administer and support enterprise PKI infrastructure, including Root and Issuing CAs Manage certificate issuance, renewal, revocation, and retirement for: Internal server certificates External/public TLS certificates Load balancers, proxies, and gateways Application and service certificates Maintain certificate templates, enrollment policies, and validity standards Operate and monitor CRL, OCSP, and certificate distribution endpoints Perform routine PKI health checks, audits, and lifecycle reviews Certificate Lifecycle Operations Proactively monitor certificate expiration across environments and prevent outages Execute planned certificate rotations with zero or minimal downtime Respond to certificate-related incidents, including expired, misconfigured, or revoked certificates Maintain certificate inventory, ownership metadata, and renewal methods Support external CA interactions for publicly trusted certificates (e.g., domain validation, reissuance) Automation & Operational Enablement Leverage existing automation tools and platforms to streamline: Certificate renewals Certificate deployment to servers, load balancers, and platforms Perform light scripting (PowerShell, shell, or Python) for: Operational automation Reporting Certificate discovery Work with automation and platform teams to integrate certificate management into: Infrastructure workflows Load balancer or ingress updates Maintain and execute runbooks for automated and manual certificate processes Note: This role does not require building complex applications or frameworks. Automation is focused on operational reliability and efficiency, not software development Compute & Platform Integration Install, update, and maintain certificates on: Windows and Linux servers Web servers (IIS, Apache, Nginx) Reverse proxies and load