RSA/MFA Engineer*

FGS, LLC; Suitland (MD); On-site; USD 121,000 - 138,000; Full time

Benefits offered by this job

Health, dental, vision insurance

401(k)

Educational reimbursement

Job summary

FGS, LLC is seeking an RSA / MFA Engineer to support the Office of Naval Intelligence (ONI) Zero Trust mission in Suitland, Maryland. The role involves designing, integrating, administering, and sustaining enterprise MFA capabilities to protect Navy Intelligence systems and services.

The engineer will provide Tier II/III support for RSA SecurID and related authentication services across enterprise apps, directories, network devices, virtualization, and cloud environments, with hands-on work on

Qualifications

• U.S. Citizenship required.
• Active TS/SCI clearance at hire.
• BS/BA in IT, Engineering, or technical discipline preferred.
• 5–7 years in information systems with focus on application administration.
• Experience integrating MFA with AD, Entra ID, apps, devices, and enterprise auth services.
• Experience with Windows, RHEL, or Cisco OS in enterprise environments.
• 3–5 years installing and administering RSA Authentication Manager or MFA tech.
• Strong knowledge of PKI, directories, Windows Group Policy, and MFA troubleshooting.
• Experience with VMware, AWS, and/or Azure for servers/auth services.

Responsibilities

• Administer and optimize RSA Authentication Manager and MFA services.
• Design and integrate MFA with AD, Entra ID, apps, and devices.
• Support RSA SecurID token issuance, revocation, and lifecycle management.
• Troubleshoot authentication, directory, PKI and access-control issues across mission systems.
• Provide Tier II/III engineering support and coordinate incident resolution with multiple teams.
• Implement MFA in VMware, AWS, and Azure environments per security requirements.

Skills

RSA MFA integration

Active Directory

Microsoft Entra ID

Cloud environments

PKI certificates

RSA SecurID

VMware

AWS

Azure

Education

BS/BA in IT/Engineering/Technical discipline

Tools

RSA Authentication Manager

Active Directory

Microsoft Entra ID

PKI certificates

VMware

AWS

Azure

Job description

Requires US Citizenship Yes
Employment Term and Type: Regular, Full Time
Required Security Clearance: (Minimum for hire) TS/SCI
Required Education: (Minimum for hire) BS or BA degree in IT, Engineering, an Engineering Discipline, or in a Technical Discipline desired.
Salary Band: $121,046.03 to $138,338.32/Annually

Job Description:

FGS, LLC is seeking an RSA / MFA Engineer to support the Office of Naval Intelligence (ONI) Zero Trust mission in Suitland, Maryland. The selected candidate will design, integrate, administer, optimize, and sustain enterprise multi-factor authentication capabilities that protect critical Navy Intelligence systems and services.
The RSA / MFA Engineer will provide Tier II/III engineering support for RSA SecurID and related authentication services across enterprise applications, directories, network devices, virtualized infrastructure, and cloud environments. The position requires hands-on experience with RSA Authentication Manager, identity and directory services, PKI/certificates, and integration of MFA into classified mission systems.

Primary Duties and Responsibilities:

• Administer, maintain, optimize, and troubleshoot RSA Authentication Manager and enterprise MFA services.
• Design and integrate MFA capabilities with Active Directory, Microsoft Entra ID, applications, Windows and RHEL systems, Cisco network devices, multifunction devices, and cloud environments.
• Support RSA SecurID token issuance, replacement, revocation, lifecycle management, and associated user-support processes.
• Troubleshoot complex authentication, directory, PKI, certificate, connectivity, and access-control issues across mission systems.
• Provide Tier II/III engineering support for MFA services and coordinate resolution of incidents, problems, and service requests with system, network, cloud, cybersecurity, and application teams.
• Implement and sustain MFA capabilities in VMware, AWS, Azure, and hybrid environments in accordance with approved enterprise architecture and security requirements.
• Support Zero Trust and identity-centric security initiatives by integrating strong authentication and least-privilege access controls into enterprise services.
• Develop and maintain technical documentation, configuration baselines, implementation procedures, diagrams, troubleshooting guides, and operational support documentation.

Required Qualifications:

• U.S. Citizenship.
• Active TS/SCI security clearance at the time of hire.
• BS or BA degree in IT, Engineering, an Engineering Discipline, or in a Technical Discipline desired.
• 5 to 7 years of experience in Information systems with specific focus on application administration. Experience integrating MFA with Active Directory, Microsoft Entra ID, applications, network devices, and enterprise authentication services.
• Experience with Windows OS Red Hat Enterprise Linux OS or Cisco network device OS.
• Three (3) to five (5) years of direct experience installing, maintaining, and administering RSA Authentication Manager or related multifactor authentication capabilities, including expert‑level knowledge of enterprise RSA Authentication Manager administration.
• Demonstrated expertise designing, implementing, optimizing, operating, and maintaining enterprise multifactor authentication technologies.
• Working knowledge of VMware, AWS, and/or Microsoft Azure for managing servers and authentication services in virtualized and cloud environments.
• Demonstrated expertise integrating MFA with workstation and server operating systems, network devices, multifunction devices, enterprise applications, and other technologies supporting both privileged and non‑privileged users.
• Working knowledge of Public Key Infrastructure (PKI), certificates, directory services, Windows Group Policy, and authentication troubleshooting.
• Effective interpersonal and customer-relations expertise, with strong analytical, troubleshooting, oral, and written communication skills.

Required Certifications:

• Must meet applicable DoD 8570.01-M/DoD 8140 cybersecurity workforce requirements for the assigned work role. An active IAT or IAM Level II/III DoD‑approved baseline certification, such as Security+ CE, CASP+, or an equivalent approved certification, is required for this billet. Security+ CE is preferred where it satisfies the applicable work‑role requirement.

Desired Qualifications:

• Experience with Microsoft Entra ID / Azure identity services and hybrid identity integration.
• Knowledge of DoD Zero Trust principles, Identity and Access Management (IAM), privileged and non‑privileged authentication, and identity‑centric security architectures.
• Experience designing, implementing, optimizing, and sustaining enterprise MFA technologies in classified DoD or Intelligence Community environments.
• Experience integrating MFA with cloud services, enterprise applications, network infrastructure, and virtualized platforms.

Education Requirements:

• BS or BA degree in IT, Engineering, an Engineering Discipline, or in a Technical Discipline desired.

Security Clearance Requirements:

• U.S. citizenship and an active TS/SCI clearance are required at the time of hire. The employee must maintain clearance eligibility throughout employment.

Physical, Work Environment & Conditions:

• Primarily onsite in Suitland, Maryland, with limited telework when authorized.
• Work is performed in a professional office, secure‑facility, and occasional datacenter or equipment‑room environment.
• Must be able to use standard office and information technology equipment and work at a computer for extended periods.
• Must be able to communicate effectively with technical, mission, program, and senior leadership stakeholders.
• Occasional schedule flexibility or limited travel may be required to support integration, maintenance, troubleshooting, or deployment activities.

This position description is not intended as, nor should it be construed as, exhaustive of all responsibilities, skills, efforts, and working conditions associated with this job. This and all positions are eligible for organization‑wide transfer. Management reserves the right to assign or reassign duties and responsibilities at any time.Company Overview: FGS, LLC is an international, leading‑edge provider of technical services to include Secure Information Systems, Security and Engineering and Intelligence Analysis. Our turn‑key solutions include design, engineering, deployment operations, and sustainment of secure technology and critical infrastructure for the protection and safety of our customers' mission‑critical information, processes, and personnel. Demonstrating an unyielding commitment to our customers, superior trust and dedication with our partners, and leading‑edge technical expertise over the past seven years, FGS has experienced explosive growth providing superior services throughout the world, from North America and the Pacific Rim to the Middle East and Europe.FGS provides secure, leading‑edge technology and process management services to military, government, and commercial clients worldwide.FGS offers a generous compensation package including health, dental, vision, 401(k), group life insurance, educational reimbursement, among other benefits.
We value our employees and strive to offer many opportunities for professional growth.
#cjpost - IT Operations
FGS, LLC is an Equal Opportunity Employer as to all protected groups, including protected veterans and individuals with disabilities

FGS Careers
113 Howard St., Suite 301
La Plata, MD 20646