Requires US Citizenship Yes
Employment Term and Type: Regular, Full Time
Required Security Clearance: (Minimum for hire) TS/SCI
Required Education: (Minimum for hire) BS or BA degree in IT, Engineering, an Engineering Discipline, or in a Technical Discipline desired.
Salary Band: $121,046.03 to $138,338.32/Annually
Job Description:FGS, LLC is seeking an RSA / MFA Engineer to support the Office of Naval Intelligence (ONI) Zero Trust mission in Suitland, Maryland. The selected candidate will design, integrate, administer, optimize, and sustain enterprise multi-factor authentication capabilities that protect critical Navy Intelligence systems and services.
The RSA / MFA Engineer will provide Tier II/III engineering support for RSA SecurID and related authentication services across enterprise applications, directories, network devices, virtualized infrastructure, and cloud environments. The position requires hands-on experience with RSA Authentication Manager, identity and directory services, PKI/certificates, and integration of MFA into classified mission systems.
Primary Duties and Responsibilities:- Administer, maintain, optimize, and troubleshoot RSA Authentication Manager and enterprise MFA services.
- Design and integrate MFA capabilities with Active Directory, Microsoft Entra ID, applications, Windows and RHEL systems, Cisco network devices, multifunction devices, and cloud environments.
- Support RSA SecurID token issuance, replacement, revocation, lifecycle management, and associated user-support processes.
- Troubleshoot complex authentication, directory, PKI, certificate, connectivity, and access-control issues across mission systems.
- Provide Tier II/III engineering support for MFA services and coordinate resolution of incidents, problems, and service requests with system, network, cloud, cybersecurity, and application teams.
- Implement and sustain MFA capabilities in VMware, AWS, Azure, and hybrid environments in accordance with approved enterprise architecture and security requirements.
- Support Zero Trust and identity-centric security initiatives by integrating strong authentication and least-privilege access controls into enterprise services.
- Develop and maintain technical documentation, configuration baselines, implementation procedures, diagrams, troubleshooting guides, and operational support documentation.
Required Qualifications:- U.S. Citizenship.
- Active TS/SCI security clearance at the time of hire.
- BS or BA degree in IT, Engineering, an Engineering Discipline, or in a Technical Discipline desired.
- 5 to 7 years of experience in Information systems with specific focus on application administration. Experience integrating MFA with Active Directory, Microsoft Entra ID, applications, network devices, and enterprise authentication services.
- Experience with Windows OS Red Hat Enterprise Linux OS or Cisco network device OS.
- Three (3) to five (5) years of direct experience installing, maintaining, and administering RSA Authentication Manager or related multifactor authentication capabilities, including expert-level knowledge of enterprise RSA Authentication Manager administration.
- Demonstrated expertise designing, implementing, optimizing, operating, and maintaining enterprise multifactor authentication technologies.
- Working knowledge of VMware, AWS, and/or Microsoft Azure for managing servers and authentication services in virtualized and cloud environments.
- Demonstrated expertise integrating MFA with workstation and server operating systems, network devices, multifunction devices, enterprise applications, and other technologies supporting both privileged and non-privileged users.
- Working knowledge of Public Key Infrastructure (PKI), certificates, directory services, Windows Group Policy, and authentication troubleshooting.
- Effective interpersonal and customer-relations expertise, with strong analytical, troubleshooting, oral, and written communication skills.
Required Certifications:- Must meet applicable DoD 8570.01-M/DoD 8140 cybersecurity workforce requirements for the assigned work role. An active IAT or IAM Level II/III DoD-approved baseline certification, such as Security+ CE, CASP+, or an equivalent approved certification, is required for this billet. Security+ CE is preferred where it satisfies the applicable work-role requirement.
Desired Qualifications:- Experience with Microsoft Entra ID / Azure identity services and hybrid identity integration.
- Knowledge of DoD Zero Trust principles, Identity and Access Management (IAM), privileged and non-privileged authentication, and identity-centric security architectures.
- Experience designing, implementing, optimizing, and sustaining enterprise MFA technologies in classified DoD or Intelligence Community environments.
- Experience integrating MFA with cloud services, enterprise applications, network infrastructure, and virtualized platforms.
Education Requirements:- BS or BA degree in IT, Engineering, an Engineering Discipline, or in a Technical Discipline desired.
Security Clearance Requirements:- U.S. citizenship and an active TS/SCI clearance are required at the time of hire. The employee must maintain clearance eligibility throughout employment.
Physical, Work Environment & Conditions:- Primarily onsite in Suitland, Maryland, with limited telework when authorized.
- Work is performed in a professional office, secure-facility, and occasional datacenter or equipment-room environment.
- Must be able to use standard office and information technology equipment and work at a computer for extended periods.
- Must be able to communicate effectively with technical, mission, program, and senior leadership stakeholders.
- Occasional schedule flexibility or limited travel may be required to support integration, maintenance, troubleshooting, or deployment activities.
This position description is not intended as, nor should it be construed as, exhaustive of all responsibilities, skills, efforts, or working conditions associated with this job. This and all positions are eligible for organization-wide transfer. Management reserves the right to assign or reassign duties and responsibilities at any time.
FGS offers a generous compensation package including health, dental, vision, 401(k), group life insurance, educational reimbursement, among other benefits.
We value our employees and strive to offer many opportunities for professional growth.
#cjpost - IT Operations
