Hybrid Principal Cybersecurity Engineer

at General Dynamics Information Technology

• Job title: Principal Cybersecurity Engineer
• Job type: Full Time
• Experience level: Lead
• Salary: $142,792 - $166,750 per year
• Degree requirement: Bachelor's Degree
• Tech skills: Azure, Cloud, Cyber Security
• Location requirements: Hybrid, Herndon, United States

About the role

• Cybersecurity Engineer Principal at GDIT leads enterprise initiatives for improving identity and access security. Collaborates with leadership to architect modern IAM solutions per Zero Trust Principles.

Responsibilities

• Partner with senior leadership, cloud architects, and engineering teams to design secure identity and access controls across hybrid environments — balancing innovation, resilience, and compliance
• Design, implement, and manage Okta Identity Cloud integrations supporting hybrid identity models.
• Define and enforce least privilege, role-based access control (RBAC), and just-in-time access across enterprise systems.
• Drive automation for identity lifecycle management using Okta Workflows, PowerShell, and API-based orchestration.
• Ensure automated compliance reporting, security controls, and governance dashboards meet audit requirements.
• Drive Active Directory retirement initiatives, migrating to modern cloud-native identity platforms.
• Oversee complex federated authentication scenarios, API integrations, and custom applications.
• Support the design and deployment of Privileged Access Management (PAM) controls using modern cloud-based solutions.
• Implement passwordless and phishing-resistant authentication using FIDO2, Okta FastPass, Windows Hello for Business, and M365 Conditional Access policies.
• Define and execute Zero Trust roadmap milestones across identity, network, and endpoint domains.
• Ensure alignment with CMMC, ISO 27001, NIST 800-53, and SOX requirements. Conduct periodic reviews of access controls, entitlements, and privileged accounts to maintain compliance.

Requirements

• Education: Bachelor’s degree. In lieu of degree, 4+ years of additional experience will be required.
• Required Experience: 8 years of progressive experience in cybersecurity engineering, identity and access management, and cloud security operations
• Required Technical Skills: Identity Access Management (IAM), Okta Lifecycle Management, Okta Workflows, Okta Identity Governance, Privileged Access Management (PAM), Zero Trust Architecture (ZTA)
• Security Clearance Level: None
• Required Skills and Abilities: Automation (Okta Workflows, PowerShell,) Active Directory, Microsoft Entra ID
• Preferred Skills: Microsoft Certified: Cybersecurity Architect Expert, Okta Certified Professional, Azure Solutions Architect Expert, or similar industry certifications

Benefits

• 401K with company match
• Comprehensive health and wellness packages
• Internal mobility team dedicated to helping you own your career
• Professional growth opportunities including paid education and certifications
• Cutting-edge technology you can learn from
• Rest and recharge with paid vacation and holidays