Systems Integration Engineer III

IDEMIA Public Security, a division of IDEMIA Group, is the leading provider of secure and trusted biometric-based solutions, transforming public and private organizations across the globe. Our industry-enabled and client-specific solutions draw upon decades of expertise in biometrics to revolutionize the fields of public security, justice and public safety, travel and transport, identity, and access control. Built on privacy and trust, our market-leading iris, fingerprint and facial recognition solutions top independent benchmarking for accuracy, fairness and scalability. These exacting standards enable our clients to build safer, fairer societies where people can live, interact, and move about freely. With 4000+ employees around the world and 150+ partners worldwide, we offer more than just a job - we provide a dynamic environment where innovation thrives, opportunities abound, and your talents are valued. Be part of a global leader shaping the future of biometric based technology. Learn more here.

We are seeking an Identity System Integration Engineer to deliver outstanding Federal Identity, Credential, and Access Management (FICAM) policy, implementation, and operational services.

The Federal Government's smart cards are the output of a dozen or more systems, some on-prem and some cloud-based, working in conjunction at very high levels of security. In a real sense, HSPD-12 credentials are the first line of cyber defense within the Federal Government.

HSPD-12 credentialing involves more than servers. For this effort, there are nearly 1,000 Workstations that leverage a mixture of thin and thick clients, some manned and some kiosk-based, connected over varying levels of bandwidth. Credential issuance systems are complex and will test every bit of your IT systems background. On any given day, you are equally likely to be looking at an IIS server as an SQL query to client workstation configurations with an on-prem hardware device to integrating API to client applications.

• Have experience in Deploying, configure, operate, and maintain Identity Management and Credential Management systems on-prem and in Microsoft Azure environments
• Have in-depth understanding of Smart card supported credential management system installation, configuration, and deployment methods, including scripting, use of APIs, orchestration, automation, and database services
• Assists technical support related to presales and business development activities with focus on IDEMIA Smart Credentials, smartcard and USB authenticator products and solutions.
• Understands the requirements by meeting with customers and presenting technical information/solutions to customers supporting the sales organization
• Collaborate with architects and developers to support API integrations into multi-platform environments
• Troubleshoot and document broad-ranging issues (operating systems, network, firewall, COTS products, access, and authentication)
• Defines integration and test strategy, test plan and tests scenarios
• Ensures requirements traceability and coverage
• Builds the integration environment and installs the solution or upgrades it
• Performs system integration and validation test including load, performance, high availability, accuracy and security tests
• Investigates issues by analyzing logs during tests execution, reports incidents and monitors them until closure
•  Produces documents that will allow proper installation, testing, operations and administration
• Prepares and provides training for customers,  support and maintenance teams
• Supports pre-sales teams on specific technical requests on integration activities

• Ability to work in the USA
• A bachelor's degree in computer science or a related technical discipline or the equivalent combination of education, technical certifications or training, and work experience
• 3+ years of total experience in the security industry, experience in configuring, integrating, and testing multi-tier information systems
• Preferred experience in Physical Access Control System (PACS) technologies (Prox, DESFire) and how cards are issued and used within these environments.
• Experience working on federal and/or commercial client engagements
• Hands-on experience integrating, troubleshooting, deploying, and maintaining Identity Management Systems, Credential Management Systems, or other large-scale systems

Proven skills in the following:

• API Frameworks (WSDL, SOAP, REST, XML) and proficiently using Swagger or other API design tools
• Performing software integration activities in an agile and smart card embedded environment

Desired skills:

• Strong customer facing interpersonal communication skills supporting customer integrations and attending pre-sales discussions supporting the business development team.
• Hands-on experience integrating, troubleshooting, deploying, and maintaining an enterprise credentialing platform such as MyID or ActivID and its associated peripherals (smart card readers, biometric capture devices)
• Experience with PIVPack, PIV SDK, FIDO SDK, and/or Open-Source Tools like OpenSC
• A strong understanding of Public Key Infrastructure (PKI), PIV credentialing (FIPS 201-3/NIST SP-800-73-4), and Public Key Enablement (PKE)
• Full understanding of the revocation model and capabilities available within PKI to include Certificate Revocation List (CRL)s and Online Certificate Status Protocol (OCSP)
• IT Security Certification (e.g., CISSP, CSEIP, CSCIP/G)