Lead IAM PKI Engineer

Who We AreJoin a team that puts its People First! Since 1889, First American (NYSE: FAF) has held an unwavering belief in its people. They are passionate about what they do, and we are equally passionate about fostering an environment where all feel welcome, supported, and empowered to be innovative and reach their full potential. Our inclusive, people-first culture has earned our company numerous accolades, including being named to the Fortune 100 Best Companies to Work For® list for nine consecutive years. We have also earned awards as a best place to work for women, diversity and LGBTQ+ employees, and have been included on more than 50 regional best places to work lists. First American will always strive to be a great place to work, for all. For more information, please visit www.careers.firstam.com.

What We DoThe Identity & Access Management team is responsible for the design and implementation of Identity & Access Management (IAM) processes and tools. In this position you will play a critical role in ensuring the security and integrity of digital communications within the First American Organization. This position will be responsible for managing the lifecycle of digital certificates, including issuance, renewal, revocation and auditing of the enterprise certificates and keys.

What You'll Do

• Responsible for creating and managing the Public Key infrastructure for a company.
• Responsible for the safe generation and distribution of cryptographic keys as well as digital certificates.
• Responsible to administer the Certificate Authority (CA) and Hardware Security Models (HSM) of company PKI infrastructure.
• Works closely with IAM team to implement Identity and Access Management PKI functionality for specific business and security requirements and processes.
• Identifies IAM work flow and business process requirements and related solutions over a complete business process including obtaining approvals, documentation, testing and training.
• Works in close coordination with the System and Business Process Analysts to understand and interpret IAM requirements per application & initiative.
• Considers the business implications of IAM work flow and processes to the current business environment.
• Identifies problems, researches alternatives, prepares presentations, drives solutions, tests to confirm, gains consensus, and implements solutions for multiple processes within multiple functions.
• Creates reports; researches and analyzes data, report trends and vital information to management/business partner.
• Provides direct support to IAM systems development and business community regarding risks associated with new or changing technologies.
• Keeps abreast of industry advancements and incorporates that knowledge into daily work activities.
• Participates in evaluation and selection of new technology.
• Resolves provisioning /deprovisioning problems to obtain operations across all platforms including email, files transfer, multimedia.
• Monitors and reports to management on the status of IAM project efforts, anticipating and identifying complex issues that inhibit the attainment of project goals and implementing corrective actions.
• Required to perform duties outside of normal work hours based on business needs.

What You'll Bring

Knowledge and Skills/Technology Used

• Strong understanding of PKI technologies including Certificate Authority systems (Venafi) and Key Mgmt (Fortanix).
• Solid understanding of scripting and programming languages as well as software development methodologies
• Experience with the configuration and maintenance of Microsoft ILM
• Solid experience with identity directories, such as LDAP or Active Directory.
• Solid communication and documentation skills
• Excellent interpersonal, relationship-building and teamwork skills
• Ability to work in a team environment and to contribute to multiple projects at once.

• 7+ years of experience working with highly scalable enterprise software, consisting of (5+) years of proven experience working with commercial PKI  products for a sizeable enterprise (preferably 5,000+ employees/Identities), including development of solutions for Identity Management, user provisioning, Single-Sign & Reduced Sign On and Web Access Management solutions.
• 3+ years of operational experience with ongoing maintenance of Identity and Access Management (IAM) solutions, including Identity and User Account Management platforms.
• Knowledge and understanding of underlying components and technologies of a PKI platform such an Venafi, Fortanix, CipherTrust, etc.
• Ability to gather identity data via SQL and LDAP queries for analysis and troubleshooting purposes
• Experience in implementing Identity and Access Management technologies and/or processes required.
• Experience in IAM product evaluation and managing vendor relationships required.
• High School Diploma required
• BS/BA in Computer Science or relevant education
• No formal responsibility  for the supervision of others but may provide functional advice or training to less experienced team members
• May instruct, direct, and assign work to other team members, monitoring project status
• Act as a team leader for projects with moderate budgets or of a short to intermediate duration
• Works independently with supervisory consultation
• Sets objectives for project goals and other team members and monitors progress to achieve goals. 
• Devises or modifies department processes and procedures.
• Negotiates, persuades and gains consensus from cross functional team(s)
• Uses skills as a seasoned, experienced professional with extensive knowledge base of industry practices and established policies and procedures
• Exercises wide latitude in determining objectives and approaches to critical assignments
• Errors will have significant business and financial impact

Salary Range: $126,100.00$168,10.00

This hiring range is a reasonable estimate of the base pay range for this position at the time of posting.  Pay is based on a number of factors which may include job-related knowledge, skills, experience, business requirements and geographic location.

What We OfferBy choice, we don’t simply accept individuality – we embrace it, we support it, and we thrive on it! Our People First Culture celebrates diversity, equity and inclusion not simply because it’s the right thing to do, but also because it’s the key to our success. We are proud to foster an authentic and inclusive workplace For All. You are free and encouraged to bring your entire, unique self to work. First American is an equal opportunity employer in every sense of the term.

** Note that the following statements only apply to candidates who will be working from an unincorporated area within Los Angeles County. **

First American will consider for employment all qualified applicants, including those with arrest or conviction records, in a manner consistent with the requirements of applicable state and local laws (e.g., the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act).

First American intends to conduct a review of an applicant’s criminal history in connection with a conditional offer. First American reasonably believes that a criminal history may have a direct, adverse and negative relationship with the following material job duties for this position potentially resulting in the withdrawal of the conditional offer of employment: handling of confidential, proprietary or trade secret information belonging to First American or its customers, administrating or facilitating financial transactions, and the ability to meet customer-imposed criminal history requirements.

Based on eligibility, First American offers a comprehensive benefits package including medical, dental, vision, 401k, PTO/paid sick leave and other great benefits like an employee stock purchase plan.