Apply on Employer Site

IDEMIA Public Security · 2 weeks ago

Identity System Integration Engineer

United States

Full-time

Remote

Mid Level

3+ years exp

IDEMIA Public Security, a division of IDEMIA Group, is the leading provider of secure and trusted biometric-based solutions. They are seeking an Identity System Integration Engineer to deliver outstanding Federal Identity, Credential, and Access Management (FICAM) policy, implementation, and operational services, focusing on deploying and maintaining identity management systems in both on-prem and cloud environments.

Information Technology & Services

Responsibilities

Have experience in Deploying, configure, operate, and maintain Identity Management and Credential Management systems on-prem and in Microsoft Azure environments

Have in-depth understanding of Smart card supported credential management system installation, configuration, and deployment methods, including scripting, use of APIs, orchestration, automation, and database services

Assists technical support related to presales and business development activities with focus on IDEMIA Smart Credentials, smartcard and USB authenticator products and solutions

Understands the requirements by meeting with customers and presenting technical information/solutions to customers supporting the sales organization

Collaborate with architects and developers to support API integrations into multi-platform environments

Troubleshoot and document broad-ranging issues (operating systems, network, firewall, COTS products, access, and authentication)

Defines integration and test strategy, test plan and tests scenarios

Ensures requirements traceability and coverage

Builds the integration environment and installs the solution or upgrades it

Performs system integration and validation test including load, performance, high availability, accuracy and security tests

Investigates issues by analyzing logs during tests execution, reports incidents and monitors them until closure

Produces documents that will allow proper installation, testing, operations and administration

Prepares and provides training for customers, support and maintenance teams

Supports pre-sales teams on specific technical requests on integration activities

Qualification

Identity Management SystemsCredential Management SystemsAPI FrameworksPublic Key InfrastructurePhysical Access Control SystemsIT Security CertificationCustomer Communication SkillsTroubleshooting SkillsAgile MethodologiesSystem Integration

Required

Ability to work in the USA

A bachelor's degree in computer science or a related technical discipline or the equivalent combination of education, technical certifications or training, and work experience

3+ years of total experience in the security industry, experience in configuring, integrating, and testing multi-tier information systems

Experience working on federal and/or commercial client engagements

Hands-on experience integrating, troubleshooting, deploying, and maintaining Identity Management Systems, Credential Management Systems, or other large-scale systems

API Frameworks (WSDL, SOAP, REST, XML) and proficiently using Swagger or other API design tools

Performing software integration activities in an agile and smart card embedded environment

Preferred

Preferred experience in Physical Access Control System (PACS) technologies (Prox, DESFire) and how cards are issued and used within these environments

Strong customer facing interpersonal communication skills supporting customer integrations and attending pre-sales discussions supporting the business development team

Hands-on experience integrating, troubleshooting, deploying, and maintaining an enterprise credentialing platform such as MyID or ActivID and its associated peripherals (smart card readers, biometric capture devices)

Experience with PIVPack, PIV SDK, FIDO SDK, and/or Open-Source Tools like OpenSC

A strong understanding of Public Key Infrastructure (PKI), PIV credentialing (FIPS 201-3/NIST SP-800-73-4), and Public Key Enablement (PKE)

Full understanding of the revocation model and capabilities available within PKI to include Certificate Revocation List (CRL)s and Online Certificate Status Protocol (OCSP)

IT Security Certification (e.g., CISSP, CSEIP, CSCIP/G)