Senior Identity and Directory Management Services (IDMS)

Responsibilities
DIGIT is seeking a Identity and Directory Management Services (IDMS) Senior Engineer with expertise with PKI to support the design, administration, management, execution & maintenance of GSA’s Identity & Directory Management Services (IDMS) and Identity, Credential, and Access Management (ICAM) solutions to meet the needs of the enterprise users & the enterprise architecture. These services, systems, and capabilities to include, but are not limited to, directory services management, ICAM, privileged account management, Single Sign-On (SSO), Active Directory (AD) Domain Name System (DNS) services, Public Key Infrastructure (PKI), Multi-Factor Authentication (MFA), auditing and log management, Continuous Diagnostics and Mitigation/Dynamic, Evolving Federal Enterprise Network Defense (CDM/DEFEND), and the management of appliances. GSA IT currently leverages Microsoft (MS) AD as the authoritative account management system.

As a leading provider of advanced information technology solutions and professional services to U.S. federal government agencies, is the prime for a $807m task order in support of the General Services Administration (GSA) Office of Digital Infrastructure Technologies (IDT) DIGIT (Digital Innovation for GSA Infrastructure Technologies) task order driving digital transformation and delivering continuous 

improvement and business value to its customers.  The team is comprised of the best-in-class technology partners to leverage forward-leaning technologies and best practices to transform GSA’s IT capabilities and shift offerings to provide a more flexible service delivery model, completing the agency’s shift to a fully digital experience along with its adoption of advanced, emerging technologies such as intelligent automation, artificial intelligence, and machine learning.

RESPONSIBILITIES

This position shall perform the following (to include but not limited to) activities

• Manage the enterprise Key Management, Certificate Management, and PKI systems.
• Manage and maintain the GSA PKI environment, to include Microsoft Certificate Authorities and Certificate Revocation CRL/ OCSP services. 
• Provide advanced support for IAM/SSO/MFA by troubleshooting a variety of difficult software problems, implementing bug fixes, and performing root cause analysis using agile methodologies.
• Token management by using the HID Credential Management Services
• Implement technical capabilities including IAM solutions and application integrations, to enhance enterprise security risk posture. 
•  Intimately familiar with IAM related protocols such as SAML, SPML, XACML, SCIM, OAuth, OIDC, OpenID and REST APIs, and other security interfaces.
• Manage, administer, and support the GSA IT MFA environment. 
• Manage, administer, and support ICAM systems and related support activities.
• Utilize automation and role-based management to ensure availability of access and continuity of services.
• Ensure requirements are gathered, processes defined, and use cases documented.
• Test and certify new product versions, bug fix and provide detailed reports.
• Providing on-call rotation support on a routine basis.
• Identifying process improvement opportunities for review and subsequent implementation.
• Providing positive customer service interactions for all levels of the organization up to and include senior executive staff.
• Performing root cause analysis, risk identification, and risk mitigation.
• Provide support and administration of the GSA IT AD environment, systems, and associated data.
• Continuously review and assess the GSA IT ICAM environment and provide recommendations for how to manage and administer the environment more efficiently.
• Ensure that all Group Policy Management (GPM) changes are controlled and documented.
• Provide Proof of Concepts and Pilots for Advancing Zero Trust and final implementation to transfer Zero Trust integration to infrastructure engineering support.
• Collaborating with other members of the engineering team to design new features or improve existing ones
• Escalate issues to vendor and third-party entities, as necessary and directed by the Government.

Qualifications
 CONTRACT REQUIRED QUALIFICATIONS

This following are REQUIRED for this position:

• Public Trust Clearance or ability to obtain.
• ITILv4 Foundation Training and ITILv4 Foundation Certification, may be obtained within 120 days after hire.
• Subject matter expertise engineering and supporting PKI.
• Possesses and applies a comprehensive knowledge across key tasks and high impact assignments. 
• Plans and leads major technology assignments. 
• Evaluates performance results and recommends major change