MITRE's Resilient Missions and Cyber Defense Department (N157) is seeking an experienced, motivated technical leader to join our identity management team. The successful candidate will be responsible for working with our Identity, Credentialing, and Access Management (ICAM) and Public Key Infrastructure (PKI) teams and supporting our Air Force sponsor in their drive to improve network security in a contested cyber environment.

The Resilient Missions and Cyber Defense Department's objective is to enable our sponsors to develop and deploy systems that can withstand adversary effects in a contested cyber environment, and aggressively defend our nation's critical infrastructure against cyber asymmetric warfare.

Our Crypto and Trusted Systems Engineering team provides critical mission assurance by developing cryptographic and resilient solutions for the warfighter while our Resilient Engineering groups focus on ensuring our weapons systems and infrastructure can "fight through" the evolving and persistent cyber threat via a combination of cyber security, resilient design, and enhanced cyber situational awareness.

Our department's work program is central to the cyber resilience of DoD missions and integral to the activities of the other MITRE portfolios. Our goal is to secure Cyberspace Superiority and ensure Joint Forces can achieve their missions in a contested cyberspace environment.

In partnership with the Project Leader and team, the candidate will develop and maintain close working relationships with sponsors and provide technical domain-specific knowledge, leadership and influence internally and externally across multiple stakeholders to move the mission outcomes forward.

Roles & Responsibilities:

• Design, implement, and maintain IAM/ICAM solutions for on-prem and cloud environments

• Understand general PKI (AF implementation is a plus).

• Develop and define identity governance policies, access standards, and security baselines

• Implement and optimize SSO, MFA, and conditional access for internal and external users

• Integrate applications and services with the enterprise identity platform

• Automate identity lifecycle processes and reduce manual access provisioning

• Continuously assess and improve ICAM posture based on emerging threats and best practices

• Know the DoD ZT Reference Architecture

• General understanding of AF networks, AFIN and AFNET

• Ensure high technical quality of products or programs that deliver mission impact

• Ensure clear communications and constructive feedback across team members with the goal of continuous improvement

Basic Qualifications:

• Typically requires a minimum, of 8 years if related experience with a Bachelor's degree in computer science, cybersecurity, information systems, or related field; or 6 years and Master's degree; or a PhD with 3 years' experience; or equivalent combination of related education and work experience.
• Ability to obtain and maintain a TS/SCI clearance
• U.S. Citizenship required

• 3+ years of experience in cybersecurity, systems engineering, or IAM/ICAM roles

• Hands-on experience with one or more enterprise Identity and Access Management (IAM/ICAM) platforms

• Strong understanding of authentication and authorization concepts, including Single Sign-On (SSO), Multi-Factor Authentication (MFA), Role-Based Access Control (RBAC) and attribute-based access concepts, etc.

• Experience designing and implementing access control policies for applications, systems, and APIs

• Familiarity with directory services and identity stores

• Understanding of lifecycle management for identities: provisioning, deprovisioning, and access reviews

• Working knowledge of network security fundamentals (firewalls, VPNs, segmentation, zero trust concepts)

• Familiarity with Zero Trust principals and architecture

• Familiarity with endpoint security and integration of identity-based controls (e.g., device compliance, conditional access)

• Strong interpersonal skills as well as effective verbal and written communication skills.
• This position requires a minimum of 50% hybrid on-site presence.

Preferred Qualifications:

• Advanced degree in cybersecurity or a related field

• Strong analytical and operational analysis skills, with experience addressing complex enterprise problems.

• Strong knowledge of Air Force projects and portfolios, and broad knowledge of AF cyber operations.

• Experience in regulated or high-security environments

• Experience with Zero Trust implementation projects, particularly identity-centric controls

• Familiarity with DevSecOps practices and integrating IAM controls into CI/CD pipelines

• Experience with data classification and data sensitivity levels

• Strong bias for action demonstrated through past technical achievements

This requisition requires the candidate to have a minimum of the following clearance(s):
None

This requisition requires the hired candidate to have or obtain, within one year from the date of hire, the following clearance(s):
Top Secret/SCI

Salary compensation range and midpoint:
$158,800 - $198,500 - $238,200 Annual

Work Location Type:
Hybrid