Identity System Integration Engineer

CertiPath Inc•Reston, VA

34d

About The Position

Want to energize your career? Looking for stability with the freedom to innovate? At CertiPath, you can have both while making the world more secure and simplifying access processes. We are seeking an Identity System Integration Engineer to deliver outstanding Federal Identity, Credential, and Access Management (FICAM) policy, implementation, and operational services. Accept the challenge, choose your path, and crush your goals at CertiPath. I've never heard of CertiPath. What do you do? We are the experts in software and services for high-assurance digital identity verification and management. We are an established organization with a 21-year track record of delivering on our promises with the drive and entrepreneurial spirit of a start-up. CertiPath is focused on bringing facility and network access management for commercial clients and government agencies into the 21st century. So, what will the Identity System Integration Engineer at CertiPath do? The Federal Government's smart cards are the output of a dozen or more systems, some on-prem and some cloud-based, working in conjunction at very high levels of security. In a real sense, HSPD-12 credentials are the first line of cyber defense within the Federal Government. HSPD-12 credentialing involves more than servers. For this effort, there are nearly 1,000 Workstations that leverage a mixture of thin and thick clients, some manned and some kiosk-based, connected over varying levels of bandwidth, much of it MPLS. Credential issuance systems are complex and will test every bit of your IT systems background. On any given day, you are equally likely to be looking at an IIS server as an SQL query. At a local permissions issue for web sockets as a proprietary security protocol between a cloud service and an on-prem hardware device. What does a typical day look like for the Identity System Integration Engineer? Although no two weeks will be the same, you will:

Requirements

U.S. citizenship and the ability to obtain a government clearance (or you have recently held a government clearance)
A bachelor's degree in computer science or a related technical discipline or the equivalent combination of education, technical certifications or training, and work experience
7+ years of total experience in the security industry, experience in configuring, integrating, and testing multi-tier information systems
Previous experience in a Windows Administrator Engineer role
Experience working on federal client engagements
Hands-on experience integrating, troubleshooting, deploying, and maintaining Identity Management Systems, Credential Management Systems, or other large-scale systems
API Frameworks (WSDL, SOAP, REST, XML) and proficiently using Swagger or other API design tools
Working in data-driven environments, preparing scripted translations (via PowerShell or JavaScript) and transfers to disparate repositories and downstream systems
Analyzing Microsoft SQL Server databases and creating complex queries
Performing software integration activities in an agile environment
Supporting network, operating systems, database, application or data layers across multiple platforms and technologies (i.e., firewalls, IDS, system hardening, VPN, host and application security)

Nice To Haves

An active government clearance of Top Secret
Hands-on experience integrating, troubleshooting, deploying, and maintaining an enterprise credentialing platform such as MyID or ActivID and its associated peripherals (smart card readers, biometric capture devices)
Experience with PIVPack, PIV SDK, ActivID ActivClient, and/or Open-Source Tools like OpenSC
A strong understanding of Public Key Infrastructure (PKI), PIV credentialing (FIPS 201-3/NIST SP-800-73-4), and Public Key Enablement (PKE)
Full understanding of the revocation model and capabilities available within PKI to include Certificate Revocation List (CRL)s and Online Certificate Status Protocol (OCSP)
IT Security Certification (e.g., CISSP, CSEIP, CSCIP/G)

Responsibilities

Deploy, configure, operate, and maintain Identity Management and Credential Management systems on-prem and in Microsoft Azure environments
Develop installation, configuration, and deployment methods, including scripting, use of APIs, orchestration, automation, and database services
Design and develop solutions using common languages/scripting languages such as PowerShell, JavaScript, and Python
Work with Microsoft SQL Server to understand database structures/data types and to create complex SQL DB queries
Utilize various API frameworks (WSDL, SOAP, REST, XML) and test API request responses using tools such as Swagger
Collaborate with architects and developers to support API integrations into multi-platform environments
Troubleshoot and document broad-ranging issues (operating systems, network, firewall, COTS products, access, and authentication)
Perform extraction, transformation, and load operations to retrieve enrichment content from existing hardware, software, and system boundary inventories