Lead Identity Cybersecurity Engineer

About the role

The Cryptography, ICAM, & System Assurance (L527) Department at MITRE is dedicated to driving innovation in ICAM, cryptography, and system assurance. We serve as trusted advisors and leaders in the ICAM community, applying our expertise to secure systems, software, and protocols.

Responsibilities

• Aiding the Federal Government in architecting and applying modern ICAM technologies to secure systems, software, and protocols.
• Designing and assessing Zero-Trust-aligned ICAM architectures and reference designs.
• Engineering authentication, authorization, and federation solutions (e.g., SAML/OIDC, step-up auth) and managing credentials/trust services (PKI, certificates).
• Leading Identity Governance & Administration (IGA) including provisioning, joiner-mover-leaver workflows, and authoritative source integration.
• Developing, evaluating, and steering RBAC/ABAC/PBAC models, entitlement/attribute strategies, and privileged-access controls.
• Building solutions for constrained environments (limited connectivity, offline sync) and defining test strategies, roadmaps, and integration plans.
• Partnering with security assessors and stakeholders to ensure auditable solutions that map to required controls.
• Collaborating with engineers, integrators, and vendors on technology evaluation, trade studies, reusable assets, and mentoring.
• Providing ICAM leadership on-site in lab environments at government-operated facilities.

Requirements

• BS with 8-10 years relevant experience, or MS with 6-8 years, or PhD with 3-5 years; or equivalent combination of education and experience.
• Strong analytical/problem-solving skills and sound technical judgment.
• Strong written and verbal communication skills.
• Demonstrated ability to deliver results and collaborate across teams.
• Ability to work effectively in secure/classified environments.

Qualifications

• BS with 8-10 years relevant experience, or MS with 6-8 years, or PhD with 3-5 years; or equivalent combination of education and experience.
• Strong analytical/problem-solving skills and sound technical judgment.
• Strong written and verbal communication skills.
• Demonstrated ability to deliver results and collaborate across teams.
• Ability to work effectively in secure/classified environments.
• Continued employment on this work is contingent upon meeting and maintaining government security eligibility requirements (requirements may change based on sponsor needs).
• This position requires a Secret Clearance.

Preferred Qualifications

• Degree in Computer Science, Cybersecurity, Electrical/Computer Engineering, or related field.
• Systems engineering experience (requirements, architecture, integration, test) and familiarity with development lifecycles.
• Experience applying security principles to enterprise architecture and system design.
• Strong understanding of ICAM concepts supporting a Zero Trust security model.
• Familiarity with threats/attack patterns relevant to identity and access systems.
• Interest in applied research and building reusable, scalable technical approaches.
• Tech Security Clearance preferred.