Zero Trust Cyber Security Engineer

Join to apply for the Zero Trust Cyber Security Engineer role at MITRE.

Why choose between doing meaningful work and having a fulfilling life? At MITRE, you can have both. Those committed to tackling the nation’s toughest challenges and the long‑term well‑being of employees. MITRE is a not‑for‑profit corporation chartered to work for the public interest. The R&D centers we operate create lasting impact in cybersecurity, healthcare, aviation, defense, and enterprise transformation. We offer competitive benefits, exceptional professional development opportunities, and a culture of innovation.

MITRE’s Cyber Defense – Installation to Edge seeks a technical leader to modernize and synchronize the Department of the Air Force’s (DAF) Identity, Credential, and Access Management (ICAM) ecosystem. The role is responsible for designing, integrating, and operationalizing resilient, data‑informed identity solutions aligned with the Department of War (DoW) Zero Trust Reference Architecture to enhance DAF mission readiness, agility, and decision advantage.

• Lead technical efforts and teams executing analyses and proofs of concept across enterprise, mission, and tactical environments, covering identity services, authentication and authorization services, PKI enhancements, federated identity, and access governance.
• Drive a unified approach to ICAM and data governance, ecosystem management, and platform integration (e.g., Okta and SailPoint) to scale modernization with consistency, interoperability, and security.
• Coordinate closely with ongoing Zero Trust and enterprise modernization initiatives to maintain alignment and momentum.
• Collaborate on‑site with sponsors and mission partners to sustain shared situational awareness, alignment, and impact.
• Maintain a minimum of 4 days per week on‑site.

• Typically requires a minimum of 5 years of relevant experience in complex technical or mission environments with a Bachelor’s degree in electrical or computer engineering, cybersecurity, or a related field; or 3 years and a Master’s degree; or a Ph.D. with relevant experience.
• Active Secret clearance with the ability to obtain and maintain a Top Secret/Sensitive Compartmented Information (TS/SCI) clearance.
• U.S. citizen to be considered for a security clearance.
• Deep understanding of defensive cyber strategies and their implementation across enterprise and tactical environments, including:
  • DAF acquisition processes
  • Systems Engineering
  • DoW ZT Reference Architecture
  • PKI and ICAM technologies
  • AF Enterprise networks
  • Authentication vs. authorization concepts
  • Application of NIST Cybersecurity Frameworks and DoW guidance
• Exceptional written and verbal communication skills, including translating complex technical findings into clear, actionable communications.
• Demonstrated track record of achieving significant technical outcomes through leadership, project execution, or stakeholder/customer collaboration.

• Active TS/SCI clearance.
• Understanding of current DAF PKI and ICAM implementations.
• Knowledge of commercial solutions such as Okta and SailPoint.

Secret clearance required.

TS/SCI clearance required within one year from the date of hire.

Annual range: $129,200 – $161,500 – $193,800.

Onsite.

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local or international law.

MITRE intends to maintain a website that is fully accessible to all individuals. If you are unable to search or apply for jobs and would like to request a reasonable accommodation for any part of MITRE’s employment process, please email recruiting help for general support and college recruiting for intern positions.

Benefits information may be found here.