Systems Engineer-Identity Management Systems

MIT Lincoln Laboratory; Oregon; Hybrid; USD 115,000 - 152,000; Full time

Benefits offered by this job

Health, dental, and vision plans

MIT-funded pension

Matching 401K

Paid leave (vacation, sick, parental,)

Job summary

MIT Lincoln Laboratory seeks an experienced identity engineer to lead the IAM platform, covering PKI, MFA, SSO and identity governance. The role blends security with usability and requires strong cross-team collaboration.

Hybrid work with on-site as needed; candidates must reside within 100 miles of the Lab and be available for on-call rotation. The position reports to the Enterprise Platforms and Infrastructure group and supports multi-OS environments.

Qualifications

• Bachelor’s degree in a related field and 5–10 years of IAM experience.
• Experience with PKI services, certificates, and S/MIME operations.
• Experience designing, deploying MFA solutions with tokens.
• Familiarity with Microsoft Certificate Services and AD.
• Troubleshoot LDAP/AD objects and permissions.
• Scripting in PowerShell, Python or Bash.
• Strong leadership, communication and vendor management.

Responsibilities

• Architect and administer IAM platform including PKI and HSM.
• Lead MFA/token management across multiple OS (Windows, macOS, Linux, iOS).
• Manage certificate issuance, revocation and SSO integration.
• Design identity management solutions and directory services.
• Maintain IAM artifacts, roadmaps and vendor relationships.
• Ensure security policy compliance and system availability.
• Participate in IT service management (incident, problem, change).

Skills

PKI operations

MFA/token management

Active Directory

PowerShell/Python/Bash

Cross-team collaboration

Security architecture

Vendor management

Leadership

Education

Bachelor's degree

5–10 years IAM experience

Tools

Microsoft EntraID

NetIQ/OpenText

Microsoft Certificate Services

SAML

Active Directory

Job description

Position DescriptionSeeking an experienced identity engineer for a position as part of the team supporting the Laboratory identity and access management platform. Blending a strong technical background in identity concepts and technologies with leadership qualities, this individual will help oversee a robust IAM landscape that is responsible for identity management, PKI, privileged access management, single sign-on and identity governance administration. The successful candidate for this position will have experience in architecting, deploying and administering various IAM solutions outlined above and displays skill in building relationships, managing time and tasks effectively and has solid communications skills in both writing and presenting. This position will work closely with other Laboratory technical teams and have a blend of both security and usability perspectives. A hybrid work arrangement, this candidate will be required to be on-site in an as-needed capacity and participate in an on-call rotation with off-hour support on occasion. This position reports to the enterprise platforms and infrastructure group within the Laboratory's digital solutions department.

Primary Duties

• Architecture and Administration of the Laboratories Public Key Infrastructure consisting of both cloud and on premise components including certificate authorities / templates, certificate revocation services and hardware security modules.
• Lead engineer for multi-factor authentication and token management currently consisting of an assortment of tokens supporting certificate-based authentication for Windows, Macintosh, Linux and iOS.
• Certificate administration and management for end-point platform configuration and adoption of authentication supporting OS, VPN and Single Sign-On.
• Participation in the administration and design of identity management solutions including directories, account creation and updates and integration with an assortment of platforms facilitating access and systems management.
• Help create and maintain artifacts in support of the IAM landscape including technical, administrative and support knowledge, product roadmaps, strategic guidance, vendor management and operational procedures.
• Ensure systems compliance with Laboratory security policies and practices and ensure system availability and adoption by customers.
• Participation in IT service management for the IAM systems including incident, knowledge and problem management as well as fulfilling service requests as necessary.

Minimum Qualifications

• Bachelors Degree and/or 5-10 years of experience
• Strong working knowledge and experience with PKI services and operations including management of certificate templates, support and operation of PKI components and troubleshooting of certificate issues involving authentication, code signing and S/MIME operations.
• Experience with designing, deploying and supporting multi-factor authentication solutions and tokens including YubiKey, Smartcard (including DoD Common Access Card), Passkeys and Biometrics across various operating systems including Windows, Macintosh, Linux and Apple iOS.
• Familiarity with PKI systems based on Microsoft Certificate Services.
• Experience with identity management systems including design / support and administration practices. Ability to troubleshoot LDAP and Active Directory objects, attributes and permissions for variety of accounts including user, administrative, service and machine objects.
• Ability to utilize AI services in helping to troubleshoot, configure and deploy solutions. Familiarity with automation and orchestration principles for operational efficiency and scripting experience with Microsoft PowerShell, Python or Bash.
• Solid foundation with networking and infrastructure fundamentals including troubleshooting best practices with firewall and micro segmentation integration including ports and protocols, load balancing and name resolution.
• Understanding and hands-on experience with engineering best practices and principles including security design and best practices, systems management and monitoring, log file analysis, ensuring continuity of operations and development guidelines and practices.
• Proven leadership capabilities including accountability, demand management, effective delegation, time management, vendor management, and proven communication skills.

Preferred Qualifications

• Working knowledge of Identity Management platforms including NetIQ/OpenText, Microsoft EntraID and Microsoft Active Directory.
• Understanding of Single Sign-On protocols and principles include SAML
• Experience with cloud-based architecture and systems management for hosting identity solutions including hybrid configurations with on premise IdM components.
• Understanding of security configuration guidelines and compliance involving NIST 800-171 to include security baselines, implementation and documentation. Experience with security audits is also a plus.
• Security certifications (e.g. CISSP, Security+) and foundational understanding of Splunk logging.

Other Qualifications

• Ability to obtain and maintain a security clearance is required for this position.
• Participation in on-call rotation and occasional off-hour support is required.

THIS POSITION IS REMOTE; HOWEVER, CANDIDATES MUST RESIDE WITHIN 100 MILES OF THE LAB AND BE AVAILABLE TO WORK ON-SITE AS NEEDED.Hiring Range: $114,600 - $151,900Disclaimer: MIT Lincoln Laboratory provides a typical hiring range as a good faith estimate of what we reasonably expect to offer for this position at the time of posting. The final salary offered to a selected candidate will depend on various factors, including—but not limited to—the scope and responsibilities of the role, the candidate's experience, skills and education/training, internal equity considerations and applicable legal requirements. This range reflects base salary only and does not include additional forms of compensation or benefits.

At MIT Lincoln Laboratory, our exceptional career opportunities include many outstanding benefits to help you stay healthy, feel supported, and enjoy a fulfilling work-life balance. Benefits offered to employees include:

Benefits

• Comprehensive health, dental, and vision plans
• MIT-funded pension
• Matching 401K
• Paid leave (including vacation, sick, parental, military, etc.)
• Tuition reimbursement and continuing education programs
• Mentorship programs
• A range of work-life balance options
• ... and much more!

Please visit our Benefits page for more information. As an employee of MIT, you can also take advantage of other voluntary benefits, discounts and perks.Selected candidate will be subject to a pre-employment background investigation and must be able to obtain and maintain a Secret level DoD security clearance.

MIT Lincoln Laboratory is an Equal Employment Opportunity (EEO) employer. All qualified applicants will receive consideration for employment and will not be discriminated against on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, veteran status, disability status, or genetic information; U.S. citizenship is required.Requisition ID: 43497#LI-RS1