Principal Identity Cybersecurity Engineer

The Mitre Corporation•McLean, VA

6d•$172,800 - $259,200•Onsite

About The Position

MITRE’s L527 Cryptography, ICAM, and System Assurance department is a multidisciplinary team focused on cryptography, system assurance, and Identity, Credential and Access Management (ICAM). The department applies scalable approaches to systems and software, evaluates technologies and solutions, fosters partnerships, and conducts research and development. Its work includes helping the Federal Government architect and apply modern ICAM technologies; deploying ICAM solutions across cloud, hybrid, and on-premises infrastructures; advising sponsors on industry trends, commercial technology, standards, and protocols; and exploring trustworthy applications of AI in ICAM and the assurance of AI-based techniques. The Principal Identity Cybersecurity Engineer translates mission needs into ICAM requirements and designs, engineers, and assesses identity and access solutions aligned with Zero Trust. The role covers authentication, authorization, federation, credential and trust services, identity governance, access-control models, and privileged access. It also addresses constrained environments, develops test strategies and integration plans, and partners with stakeholders to deliver auditable solutions mapped to required controls. The position includes technology evaluation, trade studies, reusable technical assets, and mentorship. It requires working onsite at least four days per week and an active Top Secret U.S. Government-issued security clearance; continued employment is contingent on meeting and maintaining government security eligibility requirements.

Requirements

Typically requires at least 10 years of related experience with a bachelor’s degree, 8 years with a master’s degree, or 5 years with a Ph.D.; an equivalent combination of related education and work experience may also qualify.
Strong analytical and problem-solving skills and sound technical judgment.
Strong written and verbal communication skills.
Demonstrated ability to deliver results and collaborate across teams.
Ability to work effectively in secure or classified environments.
Must have an active Top Secret U.S. Government-issued security clearance.
Must be a U.S. citizen to be considered for a security clearance.
Continued employment on this work is contingent upon meeting and maintaining government security eligibility requirements.
Must work onsite at least four days per week.

Nice To Haves

Degree in Computer Science, Cybersecurity, Electrical or Computer Engineering, or a related field.
Systems engineering experience with requirements, architecture, integration, and testing, and familiarity with development lifecycles.
Experience applying security principles to enterprise architecture and system design.
Strong understanding of ICAM concepts supporting a Zero Trust security model.
Familiarity with threats and attack patterns relevant to identity and access systems.
Interest in applied research and building reusable, scalable technical approaches.
TS/SCI eligibility.

Responsibilities

Translate mission needs into ICAM technical requirements, interfaces, and measurable outcomes.
Design and assess Zero Trust-aligned ICAM architectures and reference designs.
Engineer authentication, authorization, and federation solutions, including SAML/OIDC and step-up authentication, and manage credentials and trust services such as PKI and certificates.
Lead Identity Governance & Administration (IGA), including provisioning, joiner-mover-leaver workflows, and authoritative source integration.
Develop, evaluate, and steer RBAC/ABAC/PBAC models, entitlement and attribute strategies, and privileged-access controls.
Build solutions for constrained environments, including limited connectivity and offline synchronization, and define test strategies, roadmaps, and integration plans.
Partner with security assessors and stakeholders to ensure solutions are auditable and map to required controls.
Collaborate with engineers, integrators, and vendors on technology evaluation, trade studies, and reusable assets.
Mentor others.
Apply and evaluate ICAM technologies and approaches, including Zero Trust, post-quantum cryptography, non-human and agentic identity, secure multi-party federation, and AI-related ICAM applications, as relevant to sponsor missions and department work.