Systems Engineer-Identity Management Systems

MIT Lincoln Laboratory•Lexington, MA

8d•$114,600 - $151,900•Remote

About The Position

MIT Lincoln Laboratory is seeking an experienced identity engineer to support its identity and access management (IAM) platform. The role combines technical expertise in identity technologies with leadership, communication, and collaboration skills. The engineer will help oversee systems supporting identity management, public key infrastructure (PKI), privileged access management, single sign-on, and identity governance administration, balancing security and usability while working with other Laboratory technical teams. The position is remote for candidates residing within 100 miles of the Laboratory, with on-site work required as needed. It includes participation in an on-call rotation and occasional off-hours support. The role reports to the enterprise platforms and infrastructure group within the Laboratory’s digital solutions department.

Requirements

Bachelor’s degree and/or 5–10 years of experience.
Strong working knowledge and experience with PKI services and operations, including certificate template management, support and operation of PKI components, and troubleshooting certificate issues involving authentication, code signing, and S/MIME.
Experience designing, deploying, and supporting multi-factor authentication solutions and tokens, including YubiKey, Smartcard (including DoD Common Access Card), Passkeys, and Biometrics, across Windows, Macintosh, Linux, and Apple iOS.
Familiarity with PKI systems based on Microsoft Certificate Services.
Experience with identity management systems, including design, support, and administration practices.
Ability to troubleshoot LDAP and Active Directory objects, attributes, and permissions for user, administrative, service, and machine accounts.
Ability to use AI services to help troubleshoot, configure, and deploy solutions.
Familiarity with automation and orchestration principles for operational efficiency, and scripting experience with Microsoft PowerShell, Python, or Bash.
Solid foundation in networking and infrastructure fundamentals, including troubleshooting firewall and micro-segmentation integration, ports and protocols, load balancing, and name resolution.
Understanding and hands-on experience with engineering best practices, including security design, systems management and monitoring, log file analysis, continuity of operations, and development guidelines and practices.
Proven leadership capabilities, including accountability, demand management, effective delegation, time management, vendor management, and communication skills.
Ability to obtain and maintain a security clearance; the selected candidate must be able to obtain and maintain a Secret-level DoD security clearance.
U.S. citizenship is required.

Nice To Haves

Working knowledge of identity management platforms, including NetIQ/OpenText, Microsoft Entra ID, and Microsoft Active Directory.
Understanding of single sign-on protocols and principles, including SAML.
Experience with cloud-based architecture and systems management for hosting identity solutions, including hybrid configurations with on-premise identity management components.
Understanding of security configuration guidelines and compliance involving NIST 800-171, including security baselines, implementation, and documentation; security audit experience is also a plus.
Security certifications such as CISSP or Security+, and a foundational understanding of Splunk logging.

Responsibilities

Architect and administer the Laboratory’s public key infrastructure, including cloud and on-premise components such as certificate authorities and templates, certificate revocation services, and hardware security modules.
Serve as lead engineer for multi-factor authentication and token management, including tokens supporting certificate-based authentication for Windows, Macintosh, Linux, and iOS.
Administer and manage certificates for endpoint platform configuration and adoption of authentication supporting operating systems, VPN, and single sign-on.
Participate in the administration and design of identity management solutions, including directories, account creation and updates, and integrations with platforms that facilitate access and systems management.
Create and maintain IAM artifacts, including technical, administrative, and support knowledge, product roadmaps, strategic guidance, vendor management materials, and operational procedures.
Ensure systems comply with Laboratory security policies and practices, and support system availability and customer adoption.
Participate in IT service management for IAM systems, including incident, knowledge, and problem management, and fulfill service requests as needed.
Participate in an on-call rotation and provide occasional off-hours support.