Lead Identity Cybersecurity Engineer

About the role

The Cryptography, ICAM, & System Assurance (L527) Department at MITRE is dedicated to driving innovation in ICAM, cryptography, and system assurance. Our team specializes in developing and applying modern ICAM technologies, ensuring security and privacy in systems, software, and protocols.

Responsibilities

• Aiding the Federal Government in architecting and applying modern ICAM technologies to secure systems, software, and protocols.
• Designing and assessing Zero-Trust-aligned ICAM architectures and reference designs.
• Engineering authentication, authorization, and federation solutions (e.g., SAML/OIDC, step-up auth) and managing credentials/trust services (PKI, certificates).
• Leading Identity Governance & Administration (IGA) including provisioning, joiner-mover-leaver workflows, and authoritative source integration.
• Developing, evaluating, and steering RBAC/ABAC/PBAC models, entitlement/attribute strategies, and privileged-access controls.
• Building solutions for constrained environments (limited connectivity, offline sync) and defining test strategies, roadmaps, and integration plans.
• Partnering with security assessors and stakeholders to ensure auditable solutions that map to required controls.
• Collaborating with engineers, integrators, and vendors on technology evaluation, trade studies, reusable assets, and mentorship.
• Providing ICAM leadership on-site in lab environments at government-operated facilities.

Requirements

• BS with 8-10 years relevant experience, or MS with 6-8 years, or PhD with 3-5 years; or equivalent combination of education and experience.
• Strong analytical/problem-solving skills and sound technical judgment.
• Strong written and verbal communication skills.
• Demonstrated ability to deliver results and collaborate across teams.
• Ability to work effectively in secure/classified environments.

Qualifications

• BS with 8-10 years relevant experience, or MS with 6-8 years, or PhD with 3-5 years; or equivalent combination of education and experience.
• Strong analytical/problem-solving skills and sound technical judgment.
• Strong written and verbal communication skills.
• Demonstrated ability to deliver results and collaborate across teams.
• Ability to work effectively in secure/classified environments.

Preferred Qualifications

• Degree in Computer Science, Cybersecurity, Electrical/Computer Engineering, or related field.
• Systems engineering experience (requirements, architecture, integration, test) and familiarity with development lifecycles.
• Experience applying security principles to enterprise architecture and system design.
• Strong understanding of ICAM concepts supporting a Zero Trust security model.
• Familiarity with threats/attack patterns relevant to identity and access systems.
• Interest in applied research and building reusable, scalable technical approaches.
• TS/SCI eligibility preferred; Active TS/SCI with CI polygraph preferred.

Benefits

MITRE offers competitive benefits, exceptional professional development opportunities, and a culture of innovation that embraces adaptability, collaboration, technical excellence, and people in partnership.