Government and Public Sector - Cybersecurity - Physical Access Control (PACS) Engineer, Senior

From strategy to execution, the Government & Public Sector practice ("GPS") of Ernst & Young provides a full range of consulting and audit services to help our Federal, State, Local and Education clients implement new ideas to help achieve their mission outcomes. We deliver real change and measurable results through our diverse, high-performing teams, quality work at the highest professional standards, operational know-how from across our global organization, and creative and bold ideas that drive innovation. We enable our government clients to achieve their mission of protecting the nation and serving the people; increasing public safety; improving healthcare for our military, veterans and citizens; delivering essential public services; and helping those in need. EY is ready to help our government shape the future with confidence.

The opportunity

We are seeking a highly skilled Physical Access Control (PACS) Engineer to join our PACS security team. The PACS Engineer will provide comprehensive support for the PACS Connector application, ensuring seamless integration and operation with HSPD-12/FICAM compliant smart cards, card readers, middleware, and endpoint integration (Windows, macOS, mobile, or virtual environments) across Agency Components. The ideal candidate will have experience with PIV credential security and experience designing, installing, and maintaining PACS hardware and software, as well as developing standards, SOPs, and installation guides. This role requires both technical expertise and the ability to create enterprise-wide documentation and standards that align with security, compliance, and operational requirements.

Your key responsibilities

• Credential Management and Testing: Lead/assist with researching, troubleshooting PIV Card activation and physical access issues
• Configuration Management: Configure PACS, Validation System, and Component Users within the PACS Connector application.
• Integration and On-boarding Support: Conduct preplanning meetings to understand network configuration needs (e.g., PACS IP addresses, TCP ports). Coordinate with engineering teams to establish connectivity between component PACS systems and a centralized PACS Connector.
• Documentation: Document PACS system architecture and update the System Design Document (SDD) regularly or when changes occur.
• Training and Policy: Develop and contribute to training materials, Quick Reference Guides, and policy documentation.
• Project Management Support: Participate in the review of project Statements of Work (SOWs), Independent Government Cost Estimates (IGCEs), and market research for PACS equipment.

To qualify for the role, you must have

• Bachelor's degree in Computer Science, Information Systems, Engineering, Business, or a related field
• Knowledge of FICAM / ICAM frameworks, architectures, governance, and lifecycle management (enrollment, issuance, maintenance, suspension, revocation, and termination)
• Working knowledge of NIST standards and guidance, including NIST SP 800-73, 800-76, 800-78, 800-79, and 800-53 (IA and CM control families)
• 5-7 years hands-on experience with installation and maintenance of PACS vendor hardware and software solutions (e.g., Lenel, CCURE 9000, Identiv, HID, Honeywell, Genetec).
• Experience developing PACS and Security standards, SOPs, and installation documentation.
• Ability to troubleshoot PIV card issues across card readers, middleware, certificates, and access systems
• Experience supporting logical and physical access control systems (PACS/LACS) integrated with PIV or CAC credentials

Due to the nature of our work in the Government and Public Sector, work may be required to be completed at client, EY and/or contractor sites. Our goal is to assign professionals to projects within a commutable distance of their work location office. In certain circumstances, travel may be required beyond your work location based on client and project needs. Candidates should be willing to travel 20 - 30% or more.

Ideally, you'll also have

• Experience supporting federal government systems, DHS, FEMA, or other large-scale enterprise applications
• Experience administering HSPD-12-compliant identity credentialing systems within a federal or federally regulated environment
• Hands-on experience managing PIV and/or CAC smart card credentials, including card issuance, renewal, replacement, and revocation
• Working knowledge of networking fundamentals (IP addressing, VLANs, TCP/IP).
• Familiarity with PKI concepts, including certificate issuance, validation, revocation (CRLs/OCSP), and key management

What we look for

We're interested in intellectually curious people with a genuine passion for cybersecurity. With your expertise, we'll turn to you to speak up with innovative ideas that could make a lasting difference not only to us - but also to the industry. If you have the confidence in both your presentation and technical abilities to grow into a leading expert here, this is the role for you.

What we offer

We offer a competitive compensation package where you'll be rewarded based on your performance and recognized for the value you bring to our business. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options. Under our flexible vacation policy, you'll decide how much vacation time you need based on your own personal circumstances. You'll also be granted time off for designated EY Paid Holidays, Winter/Summer breaks, Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.
• Continuous learning: You'll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We'll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We'll give you the insights, coaching and confidence to be the leader the world needs.

What we offer you
At EY, we'll develop you with future-focused skills and equip you with world-class experiences. We'll empower you in a flexible environment, and fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. Learn more.

• We offer a comprehensive compensation and benefits package where you'll be rewarded based on your performance and recognized for the value you bring to the business. The base salary range for this job in all geographic locations in the US is $102,500 to $187,900. The base salary range for New York City Metro Area, Washington State and California (excluding Sacramento) is $122,900 to $213,400. Individual salaries within those ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options.
• Join us in our team-led and leader-enabled hybrid model. Our expectation is for most people in external, client serving roles to work together in person 40-60% of the time over the course of an engagement, project or year.
• Under our flexible vacation policy, you'll decide how much vacation time you need based on your own personal circumstances. You'll also be granted time off for designated EY Paid Holidays, Winter/Summer breaks, Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.

Are you ready to shape your future with confidence? Apply today.
EY accepts applications for this position on an on-going basis.

For those living in California, please click here for additional information.

EY focuses on high-ethical standards and integrity among its employees and expects all candidates to demonstrate these qualities.