RSA​/MFA Engineer

Requires US Citizenship Yes
Employment Term and Type:
Regular, Full Time
Required Security Clearance: (Minimum for hire) TS/SCI
Required

Education:

(Minimum for hire) BS or BA degree in IT, Engineering, an Engineering Discipline, or in a Technical Discipline desired.
Salary Band: $ to $/Annually

Job Description:

FGS, LLC is seeking an RSA / MFA Engineer to support the Office of Naval Intelligence (ONI) Zero Trust mission in Suitland, Maryland. The selected candidate will design, integrate, administer, optimize, and sustain enterprise multi-factor authentication capabilities that protect critical Navy Intelligence systems and services.
The RSA / MFA Engineer will provide Tier II/III engineering support for RSA SecurID and related authentication services across enterprise applications, directories, network devices, virtualized infrastructure, and cloud environments. The position requires hands-on experience with RSA Authentication Manager, identity and directory services, PKI/certificates, and integration of MFA into classified mission systems.

Primary Duties and Responsibilities:

• Administer, maintain, optimize, and troubleshoot RSA Authentication Manager and enterprise MFA services.
• Design and integrate MFA capabilities with Active Directory, Microsoft Entra , applications, Windows and RHEL systems, Cisco network devices, multifunction devices, and cloud environments.
• Support RSA SecurID token issuance, replacement, revocation, lifecycle management, and associated user-support processes.
• Troubleshoot complex authentication, directory, PKI, certificate, connectivity, and access-control issues across mission systems.
• Provide Tier II/III engineering support for MFA services and coordinate resolution of incidents, problems, and service requests with system, network, cloud, cybersecurity, and application teams.
• Implement and sustain MFA capabilities in VMware, AWS, Azure, and hybrid environments in accordance with approved enterprise architecture and security requirements.
• Support Zero Trust and identity-centric security initiatives by integrating strong authentication and least-privilege access controls into enterprise services.
• Develop and maintain technical documentation, configuration baselines, implementation procedures, diagrams, troubleshooting guides, and operational support documentation.

Required Qualifications:

• U.S. Citizenship.
• Active TS/SCI security clearance at the time of hire.
• BS or BA degree in IT, Engineering, an Engineering Discipline, or in a Technical Discipline desired.
• 5 to 7 years of experience in Information systems with specific focus on application administration. Experience integrating MFA with Active Directory, Microsoft Entra , applications, network devices, and enterprise authentication services.
• Experience with Windows OS Red Hat Enterprise Linux OS or Cisco network device OS.
• Three (3) to five (5) years of direct experience installing, maintaining, and administering RSA Authentication Manager or related multifactor authentication capabilities, including expert‑level knowledge of enterprise RSA Authentication Manager administration.
• Demonstrated expertise designing, implementing, optimizing, operating, and maintaining enterprise multifactor authentication technologies.
• Working knowledge of VMware, AWS, and/or Microsoft Azure for managing servers and authentication services in virtualized and cloud environments.
• Demonstrated expertise integrating MFA with workstation and server operating systems, network devices, multifunction devices, enterprise applications, and other technologies supporting both privileged and non‑privileged users.
• Working knowledge of Public Key Infrastructure (PKI), certificates, directory services, Windows Group Policy, and authentication troubleshooting.
• Effective interpersonal and customer-relations expertise, with strong analytical, troubleshooting, oral, and written communication skills.

Required

Certifications:

• Must meet applicable DoD 8570.01-M/DoD 8140 cybersecurity workforce requirements for the assigned work role. An active IAT or IAM Level II/III DoD‑approved baseline certification, such as Security+ CE, CASP+, or an equivalent approved certification, is required for this billet. Security+ CE is preferred where it satisfies the applicable work‑role requirement.

Desired

Qualifications:

• Experience with Microsoft Entra  / Azure identity services and hybrid identity integration.
• Knowledge of DoD Zero Trust principles, Identity and Access Management (IAM), privileged and non‑privileged…