Cybersecurity Engineer

As a Sr. Cybersecurity Engineer II, you’ll design and develop technical architecture components enabling application teams to integrate with zero trust authentication and authorization services. You will work closely with application developers, security architects, and infrastructure teams to build secure-by-design integration patterns and accelerate adoption of zero trust principles across the enterprise.

We know that you can’t have great technology services without amazing people. At MetroStar, we are obsessed with our people and have led a two-decade legacy of building the best and brightest teams. Because we know our future relies on our deep understanding and relentless focus on our people, we live by our mission: A passion for our people. Value for our customers.

If you think you can see yourself delivering our mission and pursuing our goals with us, then check out the job description below!

What you’ll do:

• Design, develop, and maintain reusable frameworks, libraries, APIs, and reference implementations for zero trust authentication and authorization.
• Create developer guides, documentation, and best practices to enable smooth integration with security services.
• Implement and support fine-grained authorization patterns (entitlements, row-level security, ABAC).
• Collaborate with architects and engineers to ensure security services meet performance, usability, and compliance requirements.
• Conduct code reviews and provide guidance to development teams on secure coding and integration practices.
• Research emerging zero trust and identity/access management technologies to recommend improvements.

What you’ll need to succeed:

• Minimum 10 years professional experience in software engineering, security engineering, or related roles.
• Bachelors degree OR experience may used in lieu of degree.
• Active TS/SCI + CI Poly clearance.
• Strong experience designing, developing, and deploying application components leveraging AWS cloud services in IL6+ classified environments.
• Expert-level experience implementing authentication and authorization frameworks (e.g., OAuth 2.0, OIDC, SAML).
• Strong, repeat experience with commercial or open-source identity and access management platforms (e.g., ForgeRock, Okta, Keycloak, Ping Identity).
• Strong expertise with fine-grained access control models (entitlements, row-level security, ABAC).
• Expert proficiency in at least one programming language (e.g., Java, Go, Python) for building frameworks and libraries.