Automation / Integration Engineer

Responsibilities:

• Design and build REST and SOAP-based API integrations between the GRC platform and external systems such as HSDW, CDM, CyberScope, and other customer analytics tools.
• Develop secure, authenticated data flows using JSON/XML structures and aligned with customer cybersecurity and privacy policies.
• Collaborate with developers and business analysts to define integration requirements and establish data transformation logic.
• Support customer enterprise reporting by enabling automated data pulls from the GRC platform into metrics platforms and compliance dashboards.
• Monitor, test, and troubleshoot data exchange pipelines and ensure uptime, accuracy, and performance of integration solutions.
• Maintain detailed documentation of integration endpoints, schemas, credentials, and data flow mappings in accordance with HHS audit standards.
• Support system modernization and automation initiatives by evaluating third[1]party connector tools and optimizing API performance.
• Work with HHS security teams to ensure integration practices align with Zero Trust architecture and data minimization standards.
• Supports GRC platform and application permissions and access roles, ensuring proper RBAC structure is in place for standard user groups.
• Can diagnose workflow issues and support documentation updates.
• Supports release coordination by contributing configuration details and participating in sprint reviews.
• Peer review records of configuration tasks, field mappings, and version updates to support development traceability.
• Use ServiceNow or equivalent systems to track integration tickets and maintain
• Contributes to automation strategies supporting FISMA, OMB A-123, and data synchronization initiatives, and OSCAL adoption for machine-readable compliance artifacts.

Basic Qualifications

• Possess over 8 years of experience designing and developing APIs and data integrations for enterprise IT systems, including at least 3 years working with an Enterprise Governance, Risk, and Compliance (GRC) platform including RSA Archer.
• Possess a bachelor’s degree in computer science, Information Systems, or related field with experience in GRC platform integration.
• Preferred certifications include RSA Archer Certified Administrator, MuleSoft Developer, or relevant API security credentials.
• Ability to communicate complex integration strategies to both technical and non-technical stakeholders across customer base.
• Familiarity with customer enterprise architecture, CDM data exchange, and GRC interoperability goals.
• Must be familiar with and adhere to the full Enterprise Performance Lifecycle (EPLC) and defined Software Development Life Cycle (SDLC) policies. This includes responsibility for documenting design, implementation, testing, deployment, rollback, and lessons learned. All alterations, changes, or modifications to a GRC/Archer Production type environment must be processed through the Change Control Board (CCB) with clear risk analysis, system impact reviews, and rollback procedures.