ICAM Solution Integration and Deployment Engineer

About us:

Creative Information Technology Inc (CITI) is an esteemed IT enterprise renowned for its exceptional customer service and innovation. We serve both government and commercial sectors, offering a range of solutions such as Healthcare IT, Human Services, Identity Credentialing, Cloud Computing, and Big Data Analytics. With clients in the US and abroad, we hold key contract vehicles including GSA IT Schedule 70, NIH CIO-SP3, GSA Alliant, and DHS-Eagle II.

Join us in driving growth and seizing new business opportunities!

Clearance: Secret with eligibility for Top Secret

Job requirements:

• Support Credential Management solution integration, deployment, configuration and security evaluation in secure environment
• Support interoperability testing of ICAM solution in client infrastructure environment to ensure smooth functioning of solution.
• Support security evaluation, and vulnerability assessment activities in clients'' secure environment, and identify technical deficiencies, and root cause and recommend solutions to resolve issues.
• Performing solution testing, debugging, and troubleshooting to ensure integrated systems function correctly to meet functional and technical requirements
• Coordinate and serve as a bridge between customer and product engineering/ development teams as necessary to ensure the solution meets customer requirements.

Required Skills: 

• Technical expertise in systems architecture, networking, APIs, and software/hardware integration
• Proficiency in programming languages such as Spring, Java, or Python and experience with data formats like JSON, or XML
• Knowledge and experience in using tools to interact with databases, by creating and executing scripts and monitor the impact on application functionality.
• Experience in deploying complex, microservices based distributed applications in cloud and on-premises environments, including performing configurations related to security, systems integration, performance monitoring, and log management, etc.
• Proficiency in ICAM related solutions and knowledge of NIST and other industry standards related to Identity and Credential management.
• Proficiency in deploying solutions that use PKI, HSM/key management, smart credentials, and other related technologies.
• Experience in configuring TLS/SSL for system-to-system authentication and communications security. 
• Proficiency in configuring and managing identity authentication solutions (IAM) based on OIDC, other SSO, and X.509 certificates for end user authentication.
• Familiarity with PKI and key management technologies and platforms such as Entrust Certificate Authority, Thales HSM, and EJBCA.
• Functional knowledge of Windows AD use of Smartcard for user authentication.
• Familiarity of tools and technologies related to email /document digital signing and encryption. 
• Strong ability to review system, application and security logs to perform root cause analysis for any issues related to web application performance, security, integration / data flow and other technical matters.
• Experience with automated infrastructure management tools such as Microsoft SCCM, Ansible, Terraform, or CloudFormation.
• Experience with any performance testing tools to perform stress/load test on systems and analyze results to recommend tuning techniques. 
• Experience in testing, debugging, and troubleshooting integration workflows to maintain performance, reliability, and security of systems.
• Excellent problem-solving, analytical, and communication skills to coordinate with operations and IT security teams, stakeholders, and clients
• Familiarity with tools like Splunk, Datadog, and SolarWinds.

Qualifications:

• A bachelor''s degree in computer science, engineering, or a related field
• Minimum 3 years'' experience supporting web application deployment, configuration management, and operations support. 
• Experience deploying and managing solutions in the realm of Identity, Credential, and Access management that may use PKI, HSM, and Smart credentials. 
• Familiarity with security accreditation processes (FISMA, or FedRAMP), and NIST standards and guidelines.