ICAM/HSPD-12/ICAM/FPKI Engineer Delivery Lead

Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success.

Deloitte is seeking a Java Developer/HSPD-12/ICAM/FPKI Engineer Lead to support the design, development, integration, and sustainment of identity, credential, and access management capabilities for federal environments. In this role, you will help deliver secure, scalable Java-based solutions that support HSPD-12, ICAM, and Federal Public Key Infrastructure requirements. The ideal candidate brings hands-on software engineering experience, knowledge of authentication and authorization frameworks, and the ability to work across technical teams in a dynamic client setting.

Work You'll Do

As a Project Delivery Lead i n the project, you will:

• Design, develop, test, and maintain Java-based applications supporting HSPD-12, ICAM, and FPKI capabilities.

• Deliver secure, scalable Java-based solutions that support HSPD-12, ICAM, and Federal Public Key Infrastructure requirements.

• Developing code that strictly adhere within the FICAM framework and FPIS 201 standard

• Integrate identity and access management services, authentication mechanisms, and certificate-based solutions into enterprise applications.

• Analyze technical requirements and translate them into secure, maintainable application components and system enhancements.

• Troubleshoot application defects, integration issues, and performance concerns across development, test, and production environments

• Collaborate with cross-functional teams, stakeholders, and client personnel to support delivery milestones, system modernization efforts, and implementation activities

• Participate in System assessment meetings with the auditors to provide and go over the system assessment.

• Work with the various teams to coordinate Systems patches and firmware updates, System backup.A successful candidate would possess these skills:

A successful candidate would possess these skills:

• Ability to work independently and collaborate as part of a team

• Effective written and verbal communication skills

• Meticulous attention to detail and quality of work product

• Ability to build and sustain professional relationships

• Ability to lead projects or workstreams

• Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment

• Strong interpersonal skills and professional demeanor

• Ability to meet deadlines

• Ability to provide clear guidance to others

• Deep understand of card lifecycle management with PIV certificate management and card updates, including logical access.

• Understanding of FIPS 201, FICAM and NIST SP 800.

The Team

Deloitte's Government & Public Services (GPS) practice - our people, ideas, technology and outcomes - is designed for impact. Serving federal, state, & local government clients as well as public higher education institutions, our team of professionals brings fresh perspective to help clients anticipate disruption, reimagine the possible, and fulfill their mission promise.

Our Digital Trust & Privacy offering enables trust and safety of online communications and digital products, protecting users, consumers, and patients from harm. Enables clients to provide consumer confidence in knowing with whom they are dealing and ensuring the integrity of access to data.

The Project Delivery Talent Model is designed for professionals with specialized skills that align to a current client need. Team members focus on delivering services to clients, without additional expectations related to business development or promotion. Their employment is tied to their role on a project, and they are eligible for a benefits package that is competitive for project delivery-focused professionals. Qualifications Required

• Bachelor's degree or relevant years of experience in a field closely related to the work duties.

• Active Public Trust Clearance or the ability to obtain and maintain.

• 5+ years of experience in Java application development

• 3+ years of experience supporting identity and access management, authentication, or public key infrastructure solutions

• Experience with HSPD-12, Identity, Credential, and Access Management, or Federal Public Key Infrastructure environments

• Experience integrating APIs, web services, or middleware components into enterprise applications

• Experience with Identity & Credential Mgmt Systems, example; Intercede MyID\CMS technology, Working knowledge of Certificate Authorities (CAs & RAs), Hardware Security Modules (HSMs).

• Experience with Microsoft Windows Server and Windows SQL Database. Responsibilities: - API and Protocol Implementation: Integrating standard cryptographic authentication protocols (Kerberos, PKI Smartcard Logon) into enterprise architectures.

• Certificate Validation Workflow: Developing code to authenticate PIV cards to valid digital certificates using OCSP or CRLs.

• Experience building backend code that interface with hardware infrastructure to assist with the enrollment, issuance and renewal and revocation of PIV cards.

• FICAM & FIPS Standards:. - Developing code that strictly adhere within the FICAM framework and FPIS 201 standard

• Deep understanding of HSMs configurations and Entrust Certificate Authority Administration, Java development Platform.

• Audit Compliance & System Assessment: Perform security checks and logs analysis against other metrics.

• Experience with AWS IAM, Java programming, PKI, and security and compliance.

Preferred:

• Experience supporting federal government clients

• Experience with system integration testing and production support activities

• Experience with Agile delivery methods and DevSecOps practices

• Experience with secure coding practices and application security controls

• Experience with digital certificates, credentialing systems, or certificate lifecycle management

For individuals assigned and/or hired to work in Maryland, Deloitte is required by law to include a reasonable estimate of the compensation range for this role. This compensation range is specific to Maryland and takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $125,000 to $165,000.

You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.

Information for applicants with a need for accommodation: https://www2.deloitte.com/us/en/pages/careers/articles/join-deloitte-assistance-for-disabled-applicants.html

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law.