IAM Engineer - RSA

ENHiSecure Pvt Ltd; Hyderabad; On-site; INR 800,000 - 1,600,000; Full time

Job summary

ENHiSecure Pvt Ltd is seeking an RSA Administrator to demonstrate RSA features and integrate on-prem AD, securing user accounts for a diverse user base.

You will monitor and troubleshoot the RSA infrastructure, enforce MFA, and manage token provisioning across hybrid environments while coordinating patching, upgrades, and RBAC tuning.

Qualifications

• Experience administering RSA Authentication Manager and RSA appliances.
• Strong understanding of AD/LDAP integration and MFA implementations.
• Ability to troubleshoot authentication and access control across hybrid environments.

Responsibilities

• Installing, configuring, and upgrading RSA Authentication Manager servers, replicas, and web tiers across on-prem and cloud environments.
• Connecting RSA systems with directories and enterprise apps via RADIUS, SAML, OIDC, and REST APIs.
• Enforcing Multi-Factor Authentication across privileged and non-privileged identities.
• Provisioning and revoking software tokens, hardware key fobs, and mobile authenticators for end-users.
• Designing emergency access procedures for users with lost tokens.
• Using RSA admin console for bulk user imports, profile creations, and security group sync.
• Planning deployment of security patches and major version upgrades on RSA appliances.
• Creating risk-based authentication policies and geographic fencing parameters.
• Auditing and adjusting RBAC to minimize excessive privileges across cloud and hybrid setups.
• Monitoring server resources and token license counts to timely renewals.
• Authoring DR runbooks for RSA infrastructure recovery.
• Creating SOPs for Tier 1/2 token troubleshooting.

Skills

Analytical mindset

Willingness to learn

English communication

Networking/dc vm troubleshooting

Cloud architecture

Cloud platforms (AWS/Azure/GCP)

Education

Bachelor's degree in IT/EEE or related field

Tools

RSA Authentication Manager

Active Directory

OpenLDAP

Job description

As an RSA Administrator, responsiblefor demonstrating the capabilities of RSA features & products. Integratingthe on-prem AD & secure the user accounts. Implementation of securitypolicies to strengthen users & application access for diverged user base. Monitoring& troubleshooting the infrastructure and handling the authenticationrequests to improve overall security posture.

• 1. Installing, configuring, and upgrading RSAAuthentication Manager servers, replicas, and web tiers across on-premises andcloud environments.
  
• 2. Connecting RSA systems with directories (ActiveDirectory, OpenLDAP) and enterprise applications via RADIUS, SAML, OIDC, andREST APIs.
  
• 3. Enforce Multi-Factor Authentication (MFA) across privileged andnon-privileged identities.
  
• 4. Provisioning, rotating, assigning, and revoking software tokens,hardware key fobs, and mobile authenticators for end-users.
  
• 5. Designing and executing emergency access procedures (e.g.,temporary fixed passcodes) for users with lost or broken tokens.
  
• 6. Utilizing the RSA administrative console to execute bulk userimports, profile creations, and security group synchronization.
  
• 7. Planning and scheduling the deployment of critical securitypatches, cumulative hotfixes, and major version upgrades on RSA appliances.
  
• 8. Creating and managing risk-based authentication (RBA) policies,conditional access rules, and geographic fencing parameters.
  
• 9. Audit and adjust user Role-Based Access Control (RBAC) toeliminate unnecessary excessive privileges across both cloud and hybrid setups.
  
• 10. Monitoring server CPU, memory, and token license counts toproactively recommend system expansions or renewals before resource depletion.
  
• 11. Authoring, maintaining, and testing disaster recovery (DR)runbooks specific to recovering the RSA authentication infrastructure frombare-metal backups.
  
• 12. Creating clear standard operating procedures (SOPs) for Tier 1 andTier 2 helpdesk admins regarding day-to-day token troubleshooting.
  
• 13. Manage the daily operation, health monitoring, and system upgradesof the RSA ID Plus & SecurID components
  

• 1. Understanding basic authenticationflow mechanics and troubleshooting common clock-skew time sync errors.
  
• 2. Creating and updating A, AAAA, CNAME,PTR, and SRV locator records manually.
  
• 3. Monitoring policy replication healthacross DCs using Distributed File System Replication (DFSR) commands.
  
• 4. Configuring Domain Name System (DNS)zones, Dynamic Host Configuration Protocol (DHCP) scopes, and IP AddressManagement (IPAM) structures.
  
• 5. Creating, managing, and rotatingpasswords for standard and Managed Service Accounts (MSAs).
  
• 6. Implementing different passwordcomplexity rules for specific high-risk user groups via password policies.
  
• 7. Configuring standard security andsharing tabs using inheritance and AGDLP (Account, Global, Universal, DomainLocal, Permissions) best practices.
  
• 8. Knowing the five Flexible SingleMaster Operation roles and their placements across domain controllers.
  
• 9. Enablingsecurity audit logs on OUs to trace which admin modified or moved a specificobject.
  
• 10. Applying Group Policy Objectsconditionally based on hardware traits like operating system version or laptopvs. desktop.
  
• 11. Mapping network printers, deployingregistry changes, and configuring local shortcut files natively
  
• 12. Understanding about networkingconcepts LAN, MAN & WAN.
  
• 13. Knowledge of IP addressing andsubnetting.
  

1.2. Goodto have skills:

• 1. Strong analytical mindset with an ability to troubleshoot basicissues.
  
• 2. High willingness to learn, adapt, and grasp new technologiesquickly.
  
• 3. Excellent verbal and written communication skills in English.
  
• 4. Understanding of networking & diagnosing system / vm relatedissues.
  
• 5. Understanding of cloud network architecture & administrationtechniques.
  
• 6. Exposure on AWS, Azure & GCP cloud platforms.
  
• 1. Bachelors in engineering indepartments such as IT/EEE are preferred.