| Functional Architect :: Mechanicsburg, PA local or Nearby Candidates ONLY at Mechanicsburg, Pennsylvania, USA |
| Email: [email protected] |
|
http://bit.ly/4ey8w48 https://jobs.nvoids.com/job_details.jsp?id=1611338&uid= From: pritam Singh, kpg99 [email protected] Reply to: [email protected] Job Title: Functional Architect Location: Remote , Mechanicsburg, PA local (Mostly remote, but does require onsite first day and as needed for meetings (approx. 2x/month). Duration: 6+ Months Contract Interview Process: Skype Client: Commonwealth of Pennsylvania Visa: GC-EAD/H4-EAD/H1B Position: Functional Architect - Will be responsible for designing, implementing, and overseeing the FIDO (Fast Identity Online) authentication framework within the project. The architect will work closely with the project team to ensure the successful architecture and integration approach of FIDO-based MFA solutions into the existing infrastructure and Public Safety applications. Responsibilities: Architectural Design: Develop a comprehensive architectural design for the integration of FIDO-based MFA solutions with the existing systems, including Azure, Microsoft Entra, AD, Commonwealth PKI, certificate services, and Commonwealth applications. Technology Evaluation: Evaluate FIDO2 security keys, smartcards, and Windows Hello for Business as potential authenticators to meet the Security Policy requirements. Compliance Assurance: Ensure that the FIDO-based MFA solutions comply with the CLIENT Security Policy, CLIENT Requirements Companion Document, NIST SP 800-63 guidelines, and other relevant regulatory requirements. Integration and Testing: Oversee the integration of FIDO-based MFA solutions with the existing infrastructure, conduct thorough testing, and ensure seamless interoperability. Documentation and Training: Prepare detailed technical documentation, guidelines, and training materials for the implementation and maintenance of FIDO-based MFA solutions. This includes working with solutions architects, designers, and developers within public safety. Requirements: Experience: Proven experience in designing and implementing FIDO-based authentication solutions, preferably in the context of CLIENT compliance. Proven experience and working knowledge of unified endpoint identification, registration, and authentication, preferably in the context of CLIENT compliance. Technical Expertise: In-depth knowledge of FIDO2 security keys, smartcards, Windows Hello for Business, and their integration with Azure, Entra, AD, and other relevant systems. Regulatory Knowledge: Familiarity with CLIENT Security Policy, NIST SP 800-63 guidelines, and other relevant regulatory frameworks. Communication Skills: Strong communication and collaboration skills to work effectively with cross-functional teams and stakeholders. Deliverables: Comprehensive architectural design for FIDO-based MFA and device registration and integration which starts with workstation CLIENT MFA secured logon and moves towards CLIENT MFA security at the application(s). Phased approach and timeline for achieving the full architectural design. The first focus should address the FIDO2 MFA with Public Safety Deliver Center Agencies. The second focus should address machine registration and identification. Evaluation report on FIDO2 security keys, smartcards, and Windows Hello for Business. Evaluation report on machine registration process and existing repositories; Microsoft Intunes, Workspace One, and AD. Application integration guidance and compliance assessment documentation for integrating the FIDO security solution. This document will be used solutions developers and application support configuring third-party hosted applications and solutions. Integrated and tested FIDO-based MFA solutions including a break glass solution. Technical documentation and training materials. Timeline: The Functional Architect will be engaged to complete the architectural design, phased implementation approach, and documentation to assist architects and solutions team with the implementation of the CLIENT MFA and end point solution. Conclusion: The Functional Architect will play a crucial role in ensuring the successful implementation of multi-factor authentication solutions for the CLIENT project in Pennsylvania, contributing to the security and compliance of the Client's criminal justice information systems. Citations: The CLIENT Security Policyv5.9.2 introduced important revisions in Section 5.6 Identification and Authentication (IA) and Section 5.15 System and Information Integrity (SI)among other changes. Of particular significance to law enforcement and criminal justice agencies using cloud services for the transmission, storage, or processing of CJI are the updated multi-factor authentication (MFA) requirements for identification and authentication of organizational users. Microsoft Entra ID supports both authenticator and verifier NIST SP 800-63B AAL3requirements, including the underlying FIPS 140 validation requirements. Microsoft Entra ID support for NIST SP 800-63B AAL3 exceeds the CLIENT Security Policy MFA requirements. In Microsoft's continuous effort to provide resources and guidance to agencies to help them meet their CLIENT regulatory requirements, Microsoft collaborated with CLIENT Security Analyst and Subject Matter Expert of the CLIENT ACE Division at Diverse Computing and former CLIENT Information Security Officer (ISO). Thanks and Regards, Pritam Singh Sr. Technical Recruiter | KPG99 .INC Keywords: active directory green card Idaho Iowa Pennsylvania Functional Architect :: Mechanicsburg, PA local or Nearby Candidates ONLY [email protected] http://bit.ly/4ey8w48 https://jobs.nvoids.com/job_details.jsp?id=1611338&uid= |
| [email protected] View All |
| 11:26 PM 30-Jul-24 |