Senior I O Engineering Consultant

Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health optimization on a global scale. Join us to start Caring. Connecting. Growing together.

The Email Security Engineer provides engineering, operational support, and control governance for email protection across the Enterprise 1099 Microsoft 365 tenant portfolio. The role helps protect external agent communications and maintain alignment with enterprise email security and risk requirements.

This role supports a dedicated engineering function responsible for governing and securing the Microsoft 365 and Entra ID environments for USHealth Group, HealthMarkets, and First Family Insurance. The environments support roughly 10,000 external 1099 agents. The position will help align tenant operations, identity controls, email protections, telemetry, and change governance with enterprise policies while supporting the HealthMarkets Google Workspace to Microsoft 365 migration.

Primary Responsibilities:

• Engineer and administer Exchange Online Protection and Microsoft Defender for Office 365 policies and configurations
• Maintain anti-phishing, anti-spam, anti-malware, Safe Links, Safe Attachments, and impersonation protections
• Configure and govern SPF, DKIM, DMARC, connectors, accepted domains, transport rules, and secure mail flow
• Support Proofpoint and enterprise SMTP gateway integrations where required by the approved architecture
• Monitor email security alerts, investigate suspected threats, coordinate containment, and document remediation actions
• Analyze message traces, headers, quarantine events, delivery failures, and policy actions to resolve incidents
• Validate email security configurations against enterprise standards and remediate identified control gaps
• Develop PowerShell automation and reporting for policy administration, evidence collection, and operational health checks
• Support HealthMarkets email migration planning, coexistence, cutover, domain protection, and post-migration stabilization
• Maintain runbooks, engineering standards, control evidence, change records, and support documentation
• Comply with all applicable Company policies, procedures, and business directives, changes including those relating to work location, team assignments, work schedules, and flexible work arrangements

Required Qualifications:

• Hands-on experience administering Exchange Online Protection and Microsoft Defender for Office 365
• Experience troubleshooting secure mail delivery and policy behavior in complex environments
• Demonstrated knowledge of phishing defense, email authentication, mail flow, transport rules, and threat investigation
• Solid understanding of SPF, DKIM, DMARC, SMTP, DNS, connectors, and message tracing
• Proficiency with Exchange Online PowerShell and Microsoft 365 security administration
• Proven ability to operate within formal incident, change, problem, and risk management processes.
• Proven solid written communication, documentation, and cross-team coordination skills

Preferred Qualifications:

• Relevant Microsoft security or security operations certification
• Microsoft 365 or Exchange Online certification
• Experience with Proofpoint or another enterprise secure email gateway
• Experience supporting external populations or multiple Microsoft 365 tenants
• Experience using Rally or comparable Kanban/work management tools for project, operational task, and dependency tracking
• Experience supporting Google Workspace to Microsoft 365 migrations
• Familiarity with SIEM integration, Splunk, telemetry onboarding, and security control evidence

Measures of Success

• Email protection policies remain aligned with approved enterprise standards across all in-scope tenants
• Phishing and mail security incidents are investigated, contained, and documented within agreed timelines
• Mail-flow configurations and domain protections are reliable, auditable, and supported by current documentation
• HealthMarkets migration and cutover activities are completed with validated security controls and minimal disruption

Key Partnerships

• Partners closely with Global Technology Solutions team for platform alignment and delivery, ESRO for risk and policy oversight, and ICDS leadership for operational governance and service accountability

At UnitedHealth Group, our mission is to help people live healthier lives and make the health system work better for everyone. We believe everyone-of every race, gender, sexuality, age, location and income-deserves the opportunity to live their healthiest life. Today, however, there are still far too many barriers to good health which are disproportionately experienced by people of color, historically marginalized groups and those with lower incomes. We are committed to mitigating our impact on the environment and enabling and delivering equitable care that addresses health disparities and improves health outcomes - an enterprise priority reflected in our mission.