MITRE's Secure Enterprise and Cloud Architectures Department (L523) in the Cyber Engineering Division provides subject matter expertise and consulting to Federal Government sponsors in enterprise-wide security architecture, with specific emphasis on cloud computing, zero trust architecture, 5G security, and network security technologies. The department advances the state of cyber security while leveraging the functionality and cost efficiencies of advanced architectures and technologies.

The department is part of MITRE Technology & Engineering, driving mission impact by delivering nation-leading, differentiated capabilities to a rich set of consequential national programs across the six Federally Funded Research and Development Centers (FFRDCs) that MITRE leads. Our goal is to develop solutions and deliver outcomes for our sponsors, to ensure the security, health, and prosperity of the American public. MITRE Technology & Engineering applies the expertise of technical staff and subject matter experts across our programs by fostering and developing technical talent, stewarding technical depth, conceiving and executing research, and ensuring MITRE's capabilities-people, methods, labs, platforms, and environments-remain on the leading edge.

Roles & Responsibilities:

• Architect and develop secure cloud architectures and services while working with leading cloud service providers and important missions
• Research, specify, and implement cloud-based cyber security tools, techniques, and procedures
• Apply knowledge of network architectures, sensor technologies, and cyber threats to provide customers with the capabilities to protect, detect, and respond to cyber-attacks directed against customer systems
• Leverage your vision and expertise to advance the state of the art in the use of AI/ML and zero trust to improve the security posture of government systems.

Basic Qualifications:

• Typically requires minimum of 8 years of experience with a bachelor's degree; 6 years of experience with a master's degree; or 3 years of experience with a PhD; or an equivalent combination of related education and work experience
• Advanced ability to architect secure cloud solutions and to apply zero trust principles to the architecture of complex cloud-hosted solutions
• Hands-on experience designing and securing solutions on at least one major cloud platform (e.g., AWS, Azure, GCP, OCI, IBM, Cloud)
• Strong understanding of core security domains: IAM, network security, data protection, application security, logging and monitoring, and incident response in cloud environments
• Proven experience implementing security controls and patterns using cloud-native services (e.g., security groups, WAF, KMS, IAM roles/policies, secrets management)
• Working knowledge of common security frameworks and standards (e.g., NIST, CIS, ISO 27001, SOC 2) and their application to cloud architectures (e.g., NIST RMF, NIST SSDF (SP800-218), CMMC, ISO 27001, SOC 2, FedRAMP, DoW SWFT, NIST SP 800-53, CNSSI 1253, CSA CCM, CIS Controls, CISA SCuBA)
• Familiarity with emerging security technologies and patterns
• Strong knowledge of common attack techniques and threat landscapes
• Experience with cybersecurity technologies and tools, trends, and emerging capabilities
• Ability to lead and work with others to solve challenging technical problems
• Strong verbal and written communication skills and the ability to communicate effectively with a variety of audiences to include government senior executives
• Ability to obtain and maintain a Top-Secret level security clearance
• Per the U.S. Government's eligibility requirements, you must be a U.S Citizen to be considered for a security clearance.
• This position requires a minimum of 4 days a week on-site

Preferred Qualifications:

• U.S. Government security clearance
• Relevant professional certifications
• Knowledge of Confidential Computing concepts
• Familiarity with multi-cloud environments
• Experience integrating security into CI/CD pipelines and DevOps practices
• Understanding of applicability of Artificial Intelligence and Machine Learning to cybersecurity concerns
• Familiarity with security event and incident management tools (SIEM) and security data lakes
• Experience with large enterprise and US Government IT operations, service delivery, and defensive cyber operations (DCO)

This requisition requires the candidate to have a minimum of the following clearance(s):
None

This requisition requires the hired candidate to have or obtain, within one year from the date of hire, the following clearance(s):
Top Secret

Salary compensation range and midpoint:
$158,800 - $198,500 - $238,200 Annual

Work Location Type:
Onsite

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.