IAM Identity Engineer: PKI, MFA & SSO Architect

MIT Lincoln Laboratory; Oregon; Híbrido; USD 115.000 - 152.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health, dental, and vision plans

MIT-funded pension

Matching 401K

Paid leave (vacation, sick, parental,)

Descripción de la vacante

MIT Lincoln Laboratory seeks an experienced identity engineer to lead the IAM platform, covering PKI, MFA, SSO and identity governance. The role blends security with usability and requires strong cross-team collaboration.

Hybrid work with on-site as needed; candidates must reside within 100 miles of the Lab and be available for on-call rotation. The position reports to the Enterprise Platforms and Infrastructure group and supports multi-OS environments.

Formación

• Bachelor’s degree in a related field and 5–10 years of IAM experience.
• Experience with PKI services, certificates, and S/MIME operations.
• Experience designing, deploying MFA solutions with tokens.
• Familiarity with Microsoft Certificate Services and AD.
• Troubleshoot LDAP/AD objects and permissions.
• Scripting in PowerShell, Python or Bash.
• Strong leadership, communication and vendor management.

Responsabilidades

• Architect and administer IAM platform including PKI and HSM.
• Lead MFA/token management across multiple OS (Windows, macOS, Linux, iOS).
• Manage certificate issuance, revocation and SSO integration.
• Design identity management solutions and directory services.
• Maintain IAM artifacts, roadmaps and vendor relationships.
• Ensure security policy compliance and system availability.
• Participate in IT service management (incident, problem, change).

Conocimientos

PKI operations

MFA/token management

Active Directory

PowerShell/Python/Bash

Cross-team collaboration

Security architecture

Vendor management

Leadership

Educación

Bachelor's degree

5–10 years IAM experience

Herramientas

Microsoft EntraID

NetIQ/OpenText

Microsoft Certificate Services

SAML

Active Directory

Descripción del empleo

MIT Lincoln Laboratory seeks an experienced identity engineer to lead the IAM platform, covering PKI, MFA, SSO and identity governance. The role blends security with usability and requires strong cross-team collaboration.

Hybrid work with on-site as needed; candidates must reside within 100 miles of the Lab and be available for on-call rotation. The position reports to the Enterprise Platforms and Infrastructure group and supports multi-OS environments.