RSA SecurID Zero Trust & MFA

Location: Suitland, MD

Clearance Required: Active TS/SCI

Leidos is seeking an experienced RSA SecurID-MFA Engineer to design, implement, and administer our enterprise Multi-Factor Authentication (MFA) and Identity and Access Management (IAM) infrastructure. In this role, you will be responsible for managing both on-premises RSA Authentication Manager environments and expanding hybrid cloud components using RSA ID Plus. You will ensure high availability, secure user provisioning, seamless agent integration, and robust access governance across the organization.

Key Responsibilities

• Administration & Operations: Administer, patch, and maintain RSA Authentication Manager (primary and replica instances), ensuring 99.99% availability for critical authentication services.
• Identity Source Integration: Integrate and synchronize external identity sources (Active Directory, Azure AD/Entra ID, LDAP) with RSA Authentication Manager, managing user attribute mappings and group structures.
• Authenticator & Token Lifecycle Management: Oversee the end-to-end lifecycle of hardware tokens, software tokens (SecurID Authenticator app), on-demand authentication (ODA), and modern risk-based or FIDO-based authentication methods.
• Agent & RADIUS Configuration: Configure and support authentication agents, RADIUS clients, and REST APIs to secure VPNs, virtual desktop infrastructures (VDI), cloud applications, and network entry points.
• Monitoring & Troubleshooting: Monitor system telemetry, audit logs, and security consoles. Troubleshoot authentication failures, replication lags, and agent connectivity issues promptly.
• Compliance & Auditing: Generate regular administrative, user event, and agent inventory reports to support internal security audits and compliance frameworks (SOC 2, ISO 27001, HIPAA).
• Upgrade & Migration Support: Assist in planning and executing architecture upgrades, security hardening, and potential migration paths toward cloud-based ID Plus services.

Required Qualifications & Competencies

• Bachelor’s degree in a related area with 8+ years of experience or a Master’s degree with 6+ years of experience. Additional experience may be considered in lieu of a degree.
• Active TS/SCI security clearance.
• 5+ years of hands-on experience in Information Security focusing on Enterprise Identity and Access Management (IAM) and Multi-Factor Authentication (MFA).
• Core Technical Expertise:
  • Deep operational knowledge of RSA Authentication Manager (v8.x / v9.x) administration, maintenance, and backup/restore workflows.
  • Familiarity with RSA ID Plus and cloud/hybrid authentication models.
  • Strong understanding of directory services (Active Directory, LDAP) and network authentication protocols (RADIUS, TACACS+, SAML, OIDC).
• Certifications (Preferred):
  • RSA SecurID Certified Administrator or RSA ID Plus Certified Administrator.
  • Active IAT or IAM Level II/III DoD approved 8570 baseline certifications, such as CISSP, CompTIA Security+, or relevant IAM vendor credentials are a plus.

Soft Skills: Strong analytical and troubleshooting mindset, excellent documentation capabilities, and the ability to collaborate across IT, Help Desk, and Security Operations teams.

NITESONI

DABAOPP1

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.

Original Posting:

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.