HSPD-12 Engineering Delivery Lead

Deloitte•Baltimore, MD

2d•$125,000 - $165,000•Onsite

About The Position

Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success. Deloitte is seeking a Java Developer/HSPD-12/ICAM/FPKI Engineer Lead to support the design, development, integration, and sustainment of identity, credential, and access management capabilities for federal environments. In this role, you will help deliver secure, scalable Java-based solutions that support HSPD-12, ICAM, and Federal Public Key Infrastructure requirements. The ideal candidate brings hands-on software engineering experience, knowledge of authentication and authorization frameworks, and the ability to work across technical teams in a dynamic client setting.

Requirements

Ability to work independently and collaborate as part of a team
Effective written and verbal communication skills
Meticulous attention to detail and quality of work product
Ability to build and sustain professional relationships
Ability to lead projects or workstreams
Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
Strong interpersonal skills and professional demeanor
Ability to meet deadlines
Ability to provide clear guidance to others
Deep understand of card lifecycle management with PIV certificate management and card updates, including logical access.
Understanding of FIPS 201, FICAM and NIST SP 800.
Bachelor's degree or relevant years of experience in a field closely related to the work duties.
Active Public Trust Clearance or the ability to obtain and maintain.
5+ years of experience in Java application development
3+ years of experience supporting identity and access management, authentication, or public key infrastructure solutions
Experience with HSPD-12, Identity, Credential, and Access Management, or Federal Public Key Infrastructure environments
Experience integrating APIs, web services, or middleware components into enterprise applications
Experience with Identity & Credential Mgmt Systems, example; Intercede MyID\CMS technology, Working knowledge of Certificate Authorities (CAs & RAs), Hardware Security Modules (HSMs).
Experience with Microsoft Windows Server and Windows SQL Database.
Experience with AWS IAM, Java programming, PKI, and security and compliance.

Nice To Haves

Experience supporting federal government clients
Experience with system integration testing and production support activities
Experience with Agile delivery methods and DevSecOps practices
Experience with secure coding practices and application security controls
Experience with digital certificates, credentialing systems, or certificate lifecycle management

Responsibilities

Design, develop, test, and maintain Java-based applications supporting HSPD-12, ICAM, and FPKI capabilities.
Deliver secure, scalable Java-based solutions that support HSPD-12, ICAM, and Federal Public Key Infrastructure requirements.
Developing code that strictly adhere within the FICAM framework and FPIS 201 standard
Integrate identity and access management services, authentication mechanisms, and certificate-based solutions into enterprise applications.
Analyze technical requirements and translate them into secure, maintainable application components and system enhancements.
Troubleshoot application defects, integration issues, and performance concerns across development, test, and production environments
Collaborate with cross-functional teams, stakeholders, and client personnel to support delivery milestones, system modernization efforts, and implementation activities
Participate in System assessment meetings with the auditors to provide and go over the system assessment.
Work with the various teams to coordinate Systems patches and firmware updates, System backup.
API and Protocol Implementation: Integrating standard cryptographic authentication protocols (Kerberos, PKI Smartcard Logon) into enterprise architectures.
Certificate Validation Workflow: Developing code to authenticate PIV cards to valid digital certificates using OCSP or CRLs.
Experience building backend code that interface with hardware infrastructure to assist with the enrollment, issuance and renewal and revocation of PIV cards.
FICAM & FIPS Standards:. – Developing code that strictly adhere within the FICAM framework and FPIS 201 standard
Deep understanding of HSMs configurations and Entrust Certificate Authority Administration, Java development Platform.
Audit Compliance & System Assessment: Perform security checks and logs analysis against other metrics.