Cybersecurity Engineer

Why choose between doing meaningful work and having a fulfilling life? At MITRE, you can have both. That's because MITRE people are committed to tackling our nation's toughest challenges—and we're committed to the long-term well-being of our employees. MITRE is different from most technology companies. We are a not-for-profit corporation chartered to work for the public interest, with no commercial conflicts to influence what we do. The R&D centers we operate for the government create lasting impact in fields as diverse as cybersecurity, healthcare, aviation, defense, and enterprise transformation. We're making a difference every day—working for a safer, healthier, and more secure nation and world. Our workplace reflects our values. We offer competitive benefits, exceptional professional development opportunities for career growth, and a culture of innovation that embraces adaptability, collaboration, technical excellence, and people in partnership. If this sounds like the choice you want to make, then choose MITRE - and make a difference with us.MITRE’s Resilient Missions and Cyber Defense Department (N157) is seeking an experienced, motivated technical leader to join our identity management team. The successful candidate will be responsible for working with our Identity, Credentialing, and Access Management (ICAM) and Public Key Infrastructure (PKI) teams and supporting our Air Force sponsor in their drive to improve network security in a contested cyber environment.   The Resilient Missions and Cyber Defense Department’s objective is to enable our sponsors to develop and deploy systems that can withstand adversary effects in a contested cyber environment, and aggressively defend our nation’s critical infrastructure against cyber asymmetric warfare.  Our Crypto and Trusted Systems Engineering team provides critical mission assurance by developing cryptographic and resilient solutions for the warfighter while our Resilient Engineering groups focus on ensuring our weapons systems and infrastructure can “fight through” the evolving and persistent cyber threat via a combination of cyber security, resilient design, and enhanced cyber situational awareness.  Our department’s work program is central to the cyber resilience of DoD missions and integral to the activities of the other MITRE portfolios. Our goal is to secure Cyberspace Superiority and ensure Joint Forces can achieve their missions in a contested cyberspace environment.   In partnership with the Project Leader and team, the candidate will develop and maintain close working relationships with sponsors and provide technical domain-specific knowledge, leadership and influence internally and externally across multiple stakeholders to move the mission outcomes forward.   Roles & Responsibilities:Design, implement, and maintain IAM/ICAM solutions for on-prem and cloud environments  Understand general PKI (AF implementation is a plus).  Develop and define identity governance policies, access standards, and security baselines  Implement and optimize SSO, MFA, and conditional access for internal and external users  Integrate applications and services with the enterprise identity platform  Automate identity lifecycle processes and reduce manual access provisioning  Continuously assess and improve ICAM posture based on emerging threats and best practices  Know the DoD ZT Reference Architecture  General understanding of AF networks, AFIN and AFNET  Ensure high technical quality of products or programs that deliver mission impact  Ensure clear communications and constructive feedback across team members with the goal of continuous improvement  Basic Qualifications:Active Secret clearance with ability to obtain a TS/SCI clearance if needed.  U.S. Citizenship requiredTypically requires a minimum, of 8 years if related experience with a Bachelor’s degree in computer science, cybersecurity, information systems, or related field; or 6 years and Master’s degree; or a PhD with 3 years’ experience; or equivalent combination of related education and work experience.3+ years of experience in cybersecurity, systems engineering, or IAM/ICAM roles  Hands-on experience with one or more enterprise Identity and Access Management (IAM/ICAM) platforms   Strong understanding of authentication and authorization concepts, including Single Sign-On (SSO), Multi-Factor Authentication (MFA), Role-Based Access Control (RBAC) and attribute-based access concepts, etc.  Experience designing and implementing access control policies for applications, systems, and APIs  Familiarity with directory services and identity stores   Understanding of lifecycle management for identities: provisioning, deprovisioning, and access reviews  Working knowledge of network security fundamentals (firewalls, VPNs, segmentation, zero trust concepts)  Familiarity with Zero Trust principals and architecture  Familiarity with endpoint security and integration of identity-based controls (e.g., device compliance, conditional access)  Strong interpersonal skills as well as effective verbal and written communication skills.  This position requires a minimum of 50% hybrid on-site presence.Preferred Qualifications: Advanced degree in cybersecurity or a related field   Strong analytical and operational analysis skills, with experience addressing complex enterprise problems.  Strong knowledge of Air Force projects and portfolios, and broad knowledge of AF cyber operations.  Experience in regulated or high-security environments   Experience with Zero Trust implementation projects, particularly identity-centric controls  Familiarity with DevSecOps practices and integrating IAM controls into CI/CD pipelines  Experience with data classification and data sensitivity levels  Strong bias for action demonstrated through past technical achievements  This requisition requires the candidate to have a minimum of the following clearance(s):SecretThis requisition requires the hired candidate to have or obtain, within one year from the date of hire, the following clearance(s):Top Secret/SCISalary compensation range and midpoint:$158,800 - $198,500 - $238,200 AnnualWork Location Type:HybridIt is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.Commitment to Non-DiscriminationAll qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local or international law.MITRE intends to maintain a website that is fully accessible to all individuals. If you are unable to search or apply for jobs and would like to request a reasonable accommodation for any part of MITRE’s employment process, please email View email address on click.appcast.io for general support and View email address on click.appcast.io for intern positions. This service is for individuals requiring reasonable accommodation requests. Please note that vendor solicitations will not receive a reply.Benefits information may be found here.Copyright 1997-2026, The MITRE Corporation. All rights reserved. MITRE is a registered trademark of The MITRE Corporation. Material on this site may be copied and distributed with permission only. Job SummaryJob number: R116924Profession: Engineering