RSA SecurID - MFA Engineer

Leidos LLC; Suitland (MD); On-site; USD 108,000 - 195,000; Full time

Benefits offered by this job

Competitive compensation

Health and Wellness programs

Income Protection

Paid Leave and Retirement

Job summary

Leidos is seeking an experienced RSA SecurID-MFA Engineer to design, implement, and administer our enterprise MFA and IAM infrastructure, managing on‑prem RSA Authentication Manager and hybrid cloud components using RSA ID Plus.

You will ensure high availability, secure user provisioning, agent integration, and access governance across the organization, while advancing authentication methods and compliance with SOC 2 and ISO 27001 controls.

Qualifications

• 8+ years in information security IAM and MFA.
• Experience with RSA Authentication Manager and RSA ID Plus.
• Hands-on with Active Directory, LDAP, and cloud identity.
• Security clearance TS/SCI preferred.

Responsibilities

• Administer RSA Authentication Manager and replicas, maintaining high availability.
• Integrate identity sources and manage user attribute mappings and group structures.
• Oversee token lifecycle for hardware tokens, software tokens, and modern MFA methods.
• Configure agents, RADIUS clients, and REST APIs for VPNs, VDI, and cloud apps.

Skills

RSA SecurID

MFA

IAM

TS/SCI

Cloud/hybrid auth

Education

Bachelor’s degree in related area

Master’s degree in related field

Tools

RSA Authentication Manager

RSA ID Plus

Active Directory

Azure AD/Entra ID

LDAP

RADIUS

SAML

OIDC

Job description

RSA SecurID Zero Trust & MFA Location: Suitland, MD Clearance Required: Active TS/SCI. Leidos is seeking an experienced RSA SecurID-MFA Engineer to design, implement, and administer our enterprise Multi-Factor Authentication (MFA) and Identity and Access Management (IAM) infrastructure. In this role, you will be responsible for managing both on-premises RSA Authentication Manager environments and expanding hybrid cloud components using RSA ID Plus. You will ensure high availability, secure user provisioning, seamless agent integration, and robust access governance across the organization.

Key Responsibilities

• Administration & Operations: Administer, patch, and maintain RSA Authentication Manager (primary and replica instances), ensuring 99.99% availability for critical authentication services.
• Identity Source Integration: Integrate and synchronize external identity sources (Active Directory, Azure AD/Entra ID, LDAP) with RSA Authentication Manager, managing user attribute mappings and group structures.
• Authenticator & Token Lifecycle Management: Oversee the end-to-end lifecycle of hardware tokens, software tokens (SecurID Authenticator app), on-demand authentication (ODA), and modern risk-based or FIDO-based authentication methods.
• Agent & RADIUS Configuration: Configure and support authentication agents, RADIUS clients, and REST APIs to secure VPNs, virtual desktop infrastructures (VDI), cloud applications, and network entry points.
• Monitoring & Troubleshooting: Monitor system telemetry, audit logs, and security consoles. Troubleshoot authentication failures, replication lags, and agent connectivity issues promptly.
• Compliance & Auditing: Generate regular administrative, user event, and agent inventory reports to support internal security audits and compliance frameworks (SOC 2, ISO 27001, HIPAA).
• Upgrade & Migration Support: Assist in planning and executing architecture upgrades, security hardening, and potential migration paths toward cloud-based ID Plus services.

Required Qualifications & Competencies

Bachelor’s degree in a related area with 8+ years of experience or a Master’s degree with 6+ years of experience. Additional experience may be considered in lieu of a degree.

Active TS/SCI security clearance.

5+ years of hands‑on experience in Information Security focusing on Enterprise Identity and Access Management (IAM) and Multi‑Factor Authentication (MFA).

Core Technical Expertise

Deep operational knowledge of RSA Authentication Manager (v8.x / v9.x) administration, maintenance, and backup/restore workflows.

Familiarity with RSA ID Plus and cloud/hybrid authentication models.

Strong understanding of directory services (Active Directory, LDAP) and network authentication protocols (RADIUS, TACACS+, SAML, OIDC).

Certifications (Preferred)

RSA SecurID Certified Administrator or RSA ID Plus Certified Administrator.

Active IAT or IAM Level II/III DoD approved 8570 baseline certifications, such as CISSP, CompTIA Security+, or relevant IAM vendor credentials are a plus.

Soft Skills

Strong analytical and troubleshooting mindset, excellent documentation capabilities, and the ability to collaborate across IT, Help Desk, and Security Operations teams.

Original Posting: October 7, 2026 For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range: Pay Range $107,900.00 - $195,050.00 The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $17.2billion for the fiscal year ended January 2, 2026. For more information, visit www.Leidos.com.

Pay and Benefits

• Competitive compensation
• Health and Wellness programs
• Income Protection
• Paid Leave and Retirement

More details are available here.

Securing Your Data

Leidos will never ask you to provide payment‑related information at any part of the employment application process. And Leidos will communicate with you only through emails that are sent from a Leidos.com email address. If you receive an email purporting to be from Leidos that asks for payment‑related information or any other personal information, please report the email to [e-mail].

Commitment and Diversity

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law.

Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.