Lead IAM PKI Engineer - First American Financial Corporation

Who We Are

Join a team that puts its People First! Since 1889, First American (NYSE: FAF) has held an unwavering belief in its people. They are passionate about what they do, and we are equally passionate about fostering an environment where all feel welcome, supported, and empowered to be innovative and reach their full potential. Our inclusive, people-first culture has earned our company numerous accolades, including being named to the Fortune 100 Best Companies to Work For® list for nine consecutive years. We have also earned awards as a best place to work for women, diversity and LGBTQ+ employees, and have been included on more than 50 regional best places to work lists. First American will always strive to be a great place to work, for all. For more information, please visit www.careers.firstam.com.

What We Do

The Identity & Access Management team is responsible for the design and implementation of Identity & Access Management (IAM) processes and tools. In this position you will play a critical role in ensuring the security and integrity of digital communications within the First American Organization. This position will be responsible for managing the lifecycle of digital certificates, including issuance, renewal, revocation and auditing of the enterprise certificates and keys.

What You'll Do

• Responsible for creating and managing the Public Key infrastructure for a company.
• Responsible for the safe generation and distribution of cryptographic keys as well as digital certificates.
• Responsible to administer the Certificate Authority (CA) and Hardware Security Models (HSM) of company PKI infrastructure.
• Working knowledge of industry best practices and relevant standards and requirements (i.e. NIST 800-53, 800-57, 800-130, RFC’s 2560, 3647, 5280, 8555, and CA/B Forum Requirements)
• Ability to communicate clearly and effectively partner, influence, and instill confidence with key partners (e.g. PM’s, engineers, developers)
• Ability to use OpenSSL or other similar utility to view certificates, CRLs, and OCSP responses.
• Experience integrating digital certificates with applications and services.
• Streamline & drive global adoption of our PKI and encryption services.
• Work towards continual improvement in engineering and operations in our PKI and key management environments with focus on security, simplicity, and stability.
• Integrate PKI and encryption services with various applications and systems for secure communication, authentication, and data protection.
• Troubleshoot and resolve complex issues related to certificate errors, authentication failures, and system performance.
• Monitor and maintain the security of the platforms and infrastructure, ensuring compliance with industry regulations and best practices.

• Manage the issuance and lifecycle of digital certificates, including renewal, revocation, and key rotation.

• Works closely with IAM team to implement Identity and Access Management PKI functionality for specific business and security requirements and processes.
• Identifies IAM work flow and business process requirements and related solutions over a complete business process including obtaining approvals, documentation, testing and training.
• Works in close coordination with the System and Business Process Analysts to understand and interpret IAM requirements per application & initiative.
• Considers the business implications of IAM work flow and processes to the current business environment.
• Identifies problems, researches alternatives, prepares presentations, drives solutions, tests to confirm, gains consensus, and implements solutions for multiple processes within multiple functions.
• Creates reports; researches and analyzes data, report trends and vital information to management/business partner.
• Provides direct support to IAM systems development and business community regarding risks associated with new or changing technologies.
• Keeps abreast of industry advancements and incorporates that knowledge into daily work activities.
• Participates in evaluation and selection of new technology.
• Resolves provisioning /deprovisioning problems to obtain operations across all platforms including email, files transfer, multimedia.
• Monitors and reports to management on the status of IAM project efforts, anticipating and identifying complex issues that inhibit the attainment of project goals and implementing corrective actions.
• Required to perform duties outside of normal work hours based on business needs.

What You'll Bring

Knowledge and Skills/Technology Used

• Strong understanding of PKI technologies including Certificate Authority systems (Venafi) and Key Mgmt (Fortanix).
• Solid understanding of scripting and programming languages as well as software development methodologies
• Experience with the configuration and maintenance of Microsoft ILM
• Solid experience with identity directories, such as LDAP or Active Directory.
• Solid communication and documentation skills
• Excellent interpersonal, relationship-building and teamwork skills
• Ability to work in a team environment and to contribute to multiple projects at once.
• 7+ years of experience working with highly scalable enterprise software, consisting of (5+) years of proven experience working with commercial PKI  products for a sizeable enterprise (preferably 5,000+ employees/Identities), including development of solutions for Identity Management, user provisioning, Single-Sign & Reduced Sign On and Web Access Management solutions.

• 3+ years of operational experience with ongoing maintenance of Identity and Access Management (IAM) solutions, including Identity and User Account Management platforms.
• Knowledge and understanding of underlying components and technologies of platforms, Venafi, Fortanix, CipherTrust, etc.
• Ability to gather identity data via SQL and LDAP queries for analysis and troubleshooting purposes
• Experience in implementing Identity and Access Management technologies and/or processes required.
• Experience in IAM product evaluation and managing vendor relationships required.
• Preferred: BS/BA in Computer Science or relevant education
• No formal responsibility for the supervision of others but may provide mentorship functional advice or training to less experienced team members
• May instruct, direct, and assign work to other team members, monitoring project status
• Act as a team leader for projects with moderate budgets or of a short to intermediate duration
• Works independently with supervisory consultation
• Sets objectives for project goals and other team members and monitors progress to achieve goals. 
• Devises or modifies department processes and procedures.
• Negotiates, persuades and gains consensus from cross functional team(s)
• Uses skills as a seasoned, experienced professional with extensive knowledge base of industry practices and established policies and procedures
• Exercises wide latitude in determining objectives and approaches to critical assignments

Salary Range: $126,100.00$168,10.00

This hiring range is a reasonable estimate of the base pay range for this position at the time of posting.  Pay is based on a number of factors which may include job-related knowledge, skills, experience, business requirements and geographic location.

What We Offer

By choice, we don’t simply accept individuality – we embrace it, we support it, and we thrive on it! Our People First Culture celebrates diversity, equity and inclusion not simply because it’s the right thing to do, but also because it’s the key to our success. We are proud to foster an authentic and inclusive workplace For All. You are free and encouraged to bring your entire, unique self to work. First American is an equal opportunity employer in every sense of the term.

Based on eligibility, First American offers a comprehensive benefits package including medical, dental, vision, 401k, PTO/paid sick leave and other great benefits like an employee stock purchase plan.