IAM Engineer - RSA

EnH Corporation; Hyderabad; On-site; INR 800,000 - 1,200,000; Full time

Job summary

EnH Corporation is seeking an RSA Administrator to demonstrate RSA feature capabilities, integrate on-prem AD, and secure user accounts across multi-environment deployments.

Responsibilities include implementing RSA Authentication Manager, linking systems with directory services, enforcing MFA, provisioning tokens, and designing emergency access procedures while maintaining security posture and operational readiness.

Qualifications

• Bachelor's in engineering (IT/EEE) preferred.
• Strong analytical mindset and troubleshooting skills.
• Excellent English verbal and written communication.

Responsibilities

• Installing, configuring, and upgrading RSA Authentication Manager servers, replicas, and web tiers.
• Connecting RSA systems with directories via RADIUS, SAML, OIDC, and REST APIs.
• Enforce MFA across privileged and non-privileged identities.
• Provisioning tokens, hardware fobs, and mobile authenticators for end-users.
• Designing emergency access procedures for lost tokens.

Skills

Analytical mindset

Willingness to learn

English communication

Networking concepts

Troubleshooting

Education

Bachelor's in Engineering (IT/EEE)

Tools

RSA Authentication Manager

DFSR

Job description

As an RSA Administrator, responsiblefor demonstrating the capabilities of RSA features & products. Integratingthe on-prem AD & secure the user accounts. Implementation of securitypolicies to strengthen users & application access for diverged user base. Monitoring& troubleshooting the infrastructure and handling the authenticationrequests to improve overall security posture.

• Installing, configuring, and upgrading RSAAuthentication Manager servers, replicas, and web tiers across on-premises andcloud environments.
• Connecting RSA systems with directories (ActiveDirectory, OpenLDAP) and enterprise applications via RADIUS, SAML, OIDC, andREST APIs.
• Enforce Multi-Factor Authentication (MFA) across privileged andnon-privileged identities.
• Provisioning, rotating, assigning, and revoking software tokens,hardware key fobs, and mobile authenticators for end-users.
• Designing and executing emergency access procedures (e.g.,temporary fixed passcodes) for users with lost or broken tokens.
• Utilizing the RSA administrative console to execute bulk userimports, profile creations, and security group synchronization.
• Planning and scheduling the deployment of critical securitypatches, cumulative hotfixes, and major version upgrades on RSA appliances.
• Creating and managing risk-based authentication (RBA) policies,conditional access rules, and geographic fencing parameters.
• Audit and adjust user Role-Based Access Control (RBAC) toeliminate unnecessary excessive privileges across both cloud and hybrid setups.
• Monitoring server CPU, memory, and token license counts toproactively recommend system expansions or renewals before resource depletion.
• Authoring, maintaining, and testing disaster recovery (DR)runbooks specific to recovering the RSA authentication infrastructure frombare-metal backups.
• Creating clear standard operating procedures (SOPs) for Tier 1 andTier 2 helpdesk admins regarding day-to-day token troubleshooting.
• Manage the daily operation, health monitoring, and system upgradesof the RSA ID Plus & SecurID components

• Understanding basic authenticationflow mechanics and troubleshooting common clock-skew time sync errors.
• Creating and updating A, AAAA, CNAME,PTR, and SRV locator records manually.
• Monitoring policy replication healthacross DCs using Distributed File System Replication (DFSR) commands.
• Configuring Domain Name System (DNS)zones, Dynamic Host Configuration Protocol (DHCP) scopes, and IP AddressManagement (IPAM) structures.
• Creating, managing, and rotatingpasswords for standard and Managed Service Accounts (MSAs).
• Implementing different passwordcomplexity rules for specific high-risk user groups via password policies.
• Configuring standard security andsharing tabs using inheritance and AGDLP (Account, Global, Universal, DomainLocal, Permissions) best practices.
• Knowing the five Flexible SingleMaster Operation roles and their placements across domain controllers.
• Enablingsecurity audit logs on OUs to trace which admin modified or moved a specificobject.
• Applying Group Policy Objectsconditionally based on hardware traits like operating system version or laptopvs. desktop.
• Mapping network printers, deployingregistry changes, and configuring local shortcut files natively
• Understanding about networkingconcepts LAN, MAN & WAN.
• Knowledge of IP addressing andsubnetting.

1.2. Goodto have skills:

• Strong analytical mindset with an ability to troubleshoot basicissues.
• High willingness to learn, adapt, and grasp new technologiesquickly.
• Excellent verbal and written communication skills in English.
• Understanding of networking & diagnosing system / vm relatedissues.
• Understanding of cloud network architecture & administrationtechniques.
• Exposure on AWS, Azure & GCP cloud platforms.

• 1. Bachelors in engineering indepartments such as IT/EEE are preferred.