Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health optimization on a global scale. Join us to start Caring. Connecting. Growing together.
Primary Responsibilities:
- OT/IT Asset Discovery & Visibility Validation
- Support enterprise asset discovery and validation efforts across information technology, operational technology, Internet of Things, and Internet of Medical Things environments
- Validate the completeness, accuracy, consistency, and operational relevance of discovered asset records across network, infrastructure, security, and asset intelligence platforms
- Compare discovered assets against available inventories, network diagrams, site records, vulnerability management systems, configuration management databases, and other enterprise data sources
- Identify asset visibility gaps involving unmanaged devices, unsupported systems, isolated network segments, incomplete telemetry, missing integrations, or limitations in discovery coverage
- Asset Data Quality, Classification & Reconciliation
- Analyze asset records for duplication, misclassification, incomplete attribution, stale records, inaccurate ownership, missing site assignments, and inconsistent integration mappings
- Review critical asset attributes including asset name, device type, IP address, MAC address, manufacturer, model, operating system, ownership, site location, network segment, and source system
- Perform structured reconciliation across discovery platforms and enterprise systems to identify unexplained differences in asset counts, classifications, ownership, and visibility
- Document data quality findings, assumptions, validation evidence, root causes, and required corrective actions in a clear and defensible manner
- Contribute to repeatable validation methods that improve confidence in enterprise asset intelligence used for cybersecurity, infrastructure, compliance, and operational decision making
- Discovery Gap Analysis & Technical Problem Solving
- Apply structured analysis to investigate asset visibility gaps, discovery limitations, and data discrepancies across complex OT and IT environments
- Analyze network and platform conditions that may affect discovery, including segmentation, routing, switching, VLANs, DNS, DHCP, SNMP, firewalls, access controls, collectors, sensors, scanning appliances, and integration availability
- Distinguish between true asset coverage gaps, platform configuration issues, source data limitations, inactive assets, and expected operational exceptions
- Work with technical teams to validate corrective actions and confirm whether changes improve asset discovery, classification, attribute completeness, and downstream data quality
- Escalate material asset visibility or data integrity risks with sufficient technical evidence, business context, and recommended next steps
- OT, IoT & Medical Device Security Support
- Support discovery and validation of operational technology, Internet of Things, Internet of Medical Things, clinical, facilities, and other specialized network-connected devices
- Apply risk-based judgment when evaluating devices that may have operational, patient safety, availability, regulatory, or business continuity considerations
- Analyze device behavior, network communication patterns, manufacturer and model information, protocols, and available integration data to support accurate classification
- Recognize the operational constraints associated with scanning, testing, modifying, or remediating sensitive OT and medical device environments
- Partner with clinical technology, biomedical engineering, facilities, network, infrastructure, cybersecurity, and business teams when validating specialized assets and discovery limitations
- Cross-Platform Integration & Operational Support
- Understand how asset intelligence and discovery platforms integrate with configuration management databases, vulnerability scanners, endpoint management platforms, network monitoring systems, SIEM platforms, cloud services, and other enterprise data sources
- Support platform onboarding, integration validation, scanner or collector deployment, configuration review, troubleshooting, and post-implementation verification activities
- Assist in determining whether required source systems and integrations are available, properly configured, and producing usable asset intelligence
- Contribute to operational runbooks, standard operating procedures, validation checklists, issue logs, dashboards, and continuous improvement activities
- Documentation, Governance & Risk Awareness
- Produce clear, accurate, and audit-ready documentation describing validation scope, evidence reviewed, findings, limitations, decisions, and remediation status
- Contribute to standards, procedures, guidelines, and best practices related to OT/IT asset discovery, network visibility, data quality, classification, and inventory governance
- Support risk, compliance, and audit inquiries by providing fact-based, traceable, and defensible asset intelligence inputs
- Maintain appropriate handling of sensitive network, device, vulnerability, configuration, credential, and business information
- Demonstrate sound judgment when working within regulated, security-sensitive, and operationally critical enterprise environments
- Stakeholder Communication & Professional Effectiveness
- Communicate expectations, findings, risks, dependencies, and progress clearly to both technical and executive audiences
- Translate complex technical findings into concise business impacts, decision points, and actionable recommendations
- Demonstrate solid analytical thinking, attention to detail, accountability, and consistency in execution
- Operate effectively both independently and as part of cross-functional teams distributed across multiple business and technology organizations
- Manage multiple priorities while maintaining accurate records, timely follow-up, and alignment with broader enterprise objectives
- Cross-Functional Leadership
- Influence across cybersecurity, network, infrastructure, vulnerability management, clinical technology, platform, operations, and acquired entity stakeholders
- Facilitate working sessions to review asset data, validate findings, resolve conflicting information, and establish clear actions and owners
- Communicate expectations and progress clearly to both technical and executive audiences
- Identify, prioritize, and escalate blockers that affect discovery coverage, data quality, validation, or remediation
- Promote consistent validation standards and evidence-based decision making across participating teams
- Comply with the terms and conditions of the employment contract, company policies and procedures, and any and all directives (such as, but not limited to, transfer and/or re-assignment to different work locations, change in teams and/or work shifts, policies in regards to flexibility of work benefits and/or work environment, alternative work arrangements, and other decisions that may arise due to the changing business environment). The Company may adopt, vary or rescind these policies and directives in its absolute discretion and without any limitation (implied or otherwise) on its ability to do so
The role will require gaining experience in the following Functional Competencies related to OT/IT Asset Discovery and ARMIS Network Asset Intelligence:
- Asset Intelligence Platform
- Gain familiarity operating the ARMIS Asset Intelligence Platform in a large, complex enterprise environment
- Gain ability to analyze ARMIS asset records for accuracy, completeness, and consistency across network, OT, IT, IoT, IoMT, and security domains
- Develop experience supporting ARMIS use cases related to asset visibility, unmanaged device identification, device classification, exposure analysis, and data validation
- Understand ARMIS discovery methods, data ingestion sources, collectors, Network Mapper, scanning capabilities, integrations, telemetry, and asset enrichment concepts
- OT/IT Asset Discovery & Data Quality Management
- Ability to validate discovered assets against known inventories, network information, vulnerability management platforms, and enterprise data sources
- Validate gaps, duplicates, misclassifications, missing attributes, incomplete ownership, incorrect site assignments, and stale records within asset datasets
- Support data quality initiatives focused on improving asset coverage, accuracy, consistency, traceability, and trustworthiness
- Apply solid attention to detail when reviewing asset attributes, ownership, site assignment, device classification, source attribution, and integration mappings
- Understand the differences between agent-based, active, passive, API-based, network-based, and integration-based asset discovery methods
- OT, IoT, IoMT & Network Visibility
- Develop familiarity with operational technology, Internet of Things, Internet of Medical Things, clinical systems, facilities systems, and other specialized connected assets
- Apply enterprise networking fundamentals including TCP/IP, IP addressing, routing, switching, segmentation, VLANs, DNS, DHCP, NAT, SNMP, wireless networking, and network traffic analysis
- Interpret available network signals, device behavior, protocols, manufacturer information, models, and integration data to support asset identification and classification
- Recognize discovery and remediation constraints in operationally sensitive environments where availability and safety considerations may limit intrusive testing or immediate remediation
- Cross-Tool Collaboration & Operational Support
- Experience working alongside network, infrastructure, security, vulnerability management, clinical technology, and platform teams to align asset inventory outputs with enterprise needs
- Understanding of how ARMIS integrates with complementary tools such as configuration management databases, vulnerability scanners, endpoint platforms, network monitoring tools, SIEM solutions, and cloud data sources
- Ability to communicate technical findings clearly to both technical and non-technical stakeholders
- Capable of supporting operational runbooks, standard operating procedures, validation workflows, issue management, and continuous improvement efforts
- Comfortable working in regulated, security-conscious enterprise environments with defined controls, change processes, evidence requirements, and operational dependencies
- Documentation & Governance Support
- Ability to document findings, assumptions, data sources, validation evidence, limitations, and outcomes in a clear and professional manner
- Experience contributing to standards, guidelines, procedures, and best practices related to asset discovery, vulnerability management, OT/IT visibility, and data quality
- Support audit, risk, governance, and compliance inquiries by providing fact-based and defensible asset intelligence
- Maintain traceability between identified gaps, supporting evidence, assigned remediation actions, and validation outcomes
- Professional & Analytical Skills
- Solid analytical mindset with the ability to interpret complex technical data and draw actionable conclusions
- Demonstrates accountability, consistency, and discipline when handling enterprise asset intelligence and security-sensitive information
- Effective collaborator who can operate independently while aligning with broader program objectives
- Ability to organize competing priorities, drive follow-up, and communicate unresolved risks or dependencies appropriately
Required Qualifications:
- Undergraduate degree or equivalent experience
- 12+ years of industry experience
- 5+ years of experience in cybersecurity, information security, vulnerability management, technical program management, network security, systems integration, or technology operations
- 5+ years of hands-on experience implementing, integrating, administering, troubleshooting, or supporting security, network, infrastructure, vulnerability management, or IT systems
- Experience working with asset discovery, asset inventory, vulnerability scanning, configuration data, network visibility, or device telemetry in large, complex environments
- Experience analyzing technical data to identify gaps, inconsistencies, root causes, risks, and required corrective actions
- Experience collaborating with network, infrastructure, cybersecurity, vulnerability management, application, platform, or operations teams
- Experience producing clear technical documentation, operational procedures, findings, dashboards, reports, or audit evidence
- Experience working alongside network, infrastructure, security, vulnerability management, platform, and operations teams to align asset inventory outputs with enterprise needs
- Working knowledge of enterprise networking concepts including TCP/IP, IP addressing, routing, switching, DNS, DHCP, VLANs, segmentation, firewalls, and network-connected devices
- Solid understanding of enterprise security controls and frameworks such as NIST, CIS, ISO 27001, or comparable industry standards
- Proven organization, prioritization, analytical problem-solving, stakeholder management, and communication skills
- Proven ability to communicate technical findings, risks, dependencies, and progress to both technical and non-technical audiences
- Proven comfort working in regulated, security-sensitive, or operationally critical enterprise environments
Preferred Qualifications:
- Relevant cybersecurity, networking, OT security, vulnerability management, audit, or risk certifications such as CISSP, CISM, Security+, Network+, GICSP, GRID, ISA/IEC 62443, or comparable credentials
- Hands-on experience with ARMIS, RunZero, Claroty, Nozomi Networks, Tenable.ot, Qualys, Rapid7, Tenable, or comparable asset discovery, OT security, vulnerability management, or exposure management platforms
- Experience supporting asset intelligence, asset reconciliation, network visibility, or data quality initiatives at enterprise scale
- Experience with OT, IoT, IoMT, industrial control systems, facilities systems, clinical technologies, connected medical devices, or other cyber-physical environments
- Experience analyzing network telemetry, device behavior, packet or flow data, discovery results, vulnerability data, or integration outputs
- Experience supporting scanning appliances, sensors, collectors, agents, network integrations, APIs, or data ingestion pipelines across segmented network environments
- Experience supporting medical device security, patient-safety-related technology risk, healthcare cybersecurity, or regulated healthcare environments
- Familiarity with configuration management databases, vulnerability scanners, endpoint management platforms, SIEM solutions, network monitoring platforms, and asset inventory systems
- Familiarity with risk acceptance, compensating controls, mitigation planning, vulnerability prioritization, audit support, and exception management
- Demonstrated ability to develop standard operating procedures, validation checklists, technical standards, dashboards, and executive-ready reporting
At UnitedHealth Group, our mission is to help people live healthier lives and make the health system work better for everyone. We believe everyone-of every race, gender, sexuality, age, location and income-deserves the opportunity to live their healthiest life. Today, however, there are still far too many barriers to good health which are disproportionately experienced by people of color, historically marginalized groups and those with lower incomes. We are committed to mitigating our impact on the environment and enabling and delivering equitable care that addresses health disparities and improves health outcomes - an enterprise priority reflected in our mission.