MFA Engineer

What you'll do

• Administer, patch, and maintain RSA Authentication Manager instances to ensure 99.99% availability.
• Integrate and synchronize external identity sources like Active Directory, Azure AD, and LDAP with RSA.
• Manage the end-to-end lifecycle of hardware tokens, software tokens, and FIDO-based authentication methods.
• Configure and support authentication agents, RADIUS clients, and REST APIs for VPNs and cloud applications.
• Monitor system telemetry and audit logs to troubleshoot authentication failures and replication lags.
• Generate administrative and user event reports to support internal security audits and compliance frameworks.
• Execute architecture upgrades, security hardening, and migrations toward cloud-based RSA ID Plus services.

What we're looking for

• Bachelor’s degree with 8+ years of experience or a Master’s degree with 6+ years of experience.
• Active TS/SCI security clearance.
• 5+ years of hands-on experience in Information Security focusing on Enterprise Identity and Access Management (IAM) and Multi-Factor Authentication (MFA).
• Deep operational knowledge of RSA Authentication Manager (v8.x / v9.x) administration, maintenance, and backup/restore workflows.
• Familiarity with RSA ID Plus and cloud/hybrid authentication models.
• Strong understanding of directory services (Active Directory, LDAP) and network authentication protocols (RADIUS, TACACS+, SAML, OIDC).
• RSA SecurID Certified Administrator or RSA ID Plus Certified Administrator (preferred).
• Active IAT or IAM Level II/III DoD approved 8570 baseline certifications, such as CISSP or CompTIA Security+ (preferred).