RSA SecurID - MFA Engineer

Leidos•Suitland, MD

1d•$107,900 - $195,050•Onsite

About The Position

Leidos is seeking an experienced RSA SecurID-MFA Engineer to design, implement, and administer our enterprise Multi-Factor Authentication (MFA) and Identity and Access Management (IAM) infrastructure. In this role, you will be responsible for managing both on-premises RSA Authentication Manager environments and expanding hybrid cloud components using RSA ID Plus. You will ensure high availability, secure user provisioning, seamless agent integration, and robust access governance across the organization.

Requirements

Bachelor’s degree in a related area with 8+ years of experience or a Master’s degree with 6+ years of experience. Additional experience may be considered in lieu of a degree.
Active TS/SCI security clearance.
5+ years of hands-on experience in Information Security focusing on Enterprise Identity and Access Management (IAM) and Multi-Factor Authentication (MFA).
Deep operational knowledge of RSA Authentication Manager (v8.x / v9.x) administration, maintenance, and backup/restore workflows.
Familiarity with RSA ID Plus and cloud/hybrid authentication models.
Strong understanding of directory services (Active Directory, LDAP) and network authentication protocols (RADIUS, TACACS+, SAML, OIDC).
Strong analytical and troubleshooting mindset, excellent documentation capabilities, and the ability to collaborate across IT, Help Desk, and Security Operations teams.

Nice To Haves

RSA SecurID Certified Administrator or RSA ID Plus Certified Administrator.
Active IAT or IAM Level II/III DoD approved 8570 baseline certifications, such as CISSP, CompTIA Security+, or relevant IAM vendor credentials are a plus.

Responsibilities

Administer, patch, and maintain RSA Authentication Manager (primary and replica instances), ensuring 99.99% availability for critical authentication services.
Integrate and synchronize external identity sources (Active Directory, Azure AD/Entra ID, LDAP) with RSA Authentication Manager, managing user attribute mappings and group structures.
Oversee the end-to-end lifecycle of hardware tokens, software tokens (SecurID Authenticator app), on-demand authentication (ODA), and modern risk-based or FIDO-based authentication methods.
Configure and support authentication agents, RADIUS clients, and REST APIs to secure VPNs, virtual desktop infrastructures (VDI), cloud applications, and network entry points.
Monitor system telemetry, audit logs, and security consoles. Troubleshoot authentication failures, replication lags, and agent connectivity issues promptly.
Generate regular administrative, user event, and agent inventory reports to support internal security audits and compliance frameworks (SOC 2, ISO 27001, HIPAA).
Assist in planning and executing architecture upgrades, security hardening, and potential migration paths toward cloud-based ID Plus services.