IAM Engineer - RSA

As an RSA Administrator, responsible for demonstrating the capabilities of RSA features & products. Integrating the on-prem AD & secure the user accounts. Implementation of security policies to strengthen users & application access for diverged user base. Monitoring & troubleshooting the infrastructure and handling the authentication requests to improve overall security posture.

​

1. Installing, configuring, and upgrading RSA Authentication Manager servers, replicas, and web tiers across on-premises and cloud environments.
2. Connecting RSA systems with directories (Active Directory, OpenLDAP) and enterprise applications via RADIUS, SAML, OIDC, and REST APIs.
3. Enforce Multi-Factor Authentication (MFA) across privileged and non-privileged identities.
4. Provisioning, rotating, assigning, and revoking software tokens, hardware key fobs, and mobile authenticators for end-users.
5. Designing and executing emergency access procedures (e.g., temporary fixed passcodes) for users with lost or broken tokens.
6. Utilizing the RSA administrative console to execute bulk user imports, profile creations, and security group synchronization.
7. Planning and scheduling the deployment of critical security patches, cumulative hotfixes, and major version upgrades on RSA appliances.
8. Creating and managing risk-based authentication (RBA) policies, conditional access rules, and geographic fencing parameters.
9. Audit and adjust user Role-Based Access Control (RBAC) to eliminate unnecessary excessive privileges across both cloud and hybrid setups.
10. Monitoring server CPU, memory, and token license counts to proactively recommend system expansions or renewals before resource depletion.
11. Authoring, maintaining, and testing disaster recovery (DR) runbooks specific to recovering the RSA authentication infrastructure from bare-metal backups.
12. Creating clear standard operating procedures (SOPs) for Tier 1 and Tier 2 helpdesk admins regarding day-to-day token troubleshooting.
13. Manage the daily operation, health monitoring, and system upgrades of the RSA ID Plus & SecurID components ​ Requirements 1.1. Must have skills:
14. Understanding basic authentication flow mechanics and troubleshooting common clock-skew time sync errors.
15. Creating and updating A, AAAA, CNAME, PTR, and SRV locator records manually.
16. Monitoring policy replication health across DCs using Distributed File System Replication (DFSR) commands.
17. Configuring Domain Name System (DNS) zones, Dynamic Host Configuration Protocol (DHCP) scopes, and IP Address Management (IPAM) structures.
18. Creating, managing, and rotating passwords for standard and Managed Service Accounts (MSAs).
19. Implementing different password complexity rules for specific high-risk user groups via password policies.
20. Configuring standard security and sharing tabs using inheritance and AGDLP (Account, Global, Universal, Domain Local, Permissions) best practices.
21. Knowing the five Flexible Single Master Operation roles and their placements across domain controllers.
22. Enabling security audit logs on OUs to trace which admin modified or moved a specific object.
23. Applying Group Policy Objects conditionally based on hardware traits like operating system version or laptop vs. desktop.
24. Mapping network printers, deploying registry changes, and configuring local shortcut files natively
25. Understanding about networking concepts LAN, MAN & WAN.
26. Knowledge of IP addressing and subnetting. 1.2. Good to have skills:
27. Strong analytical mindset with an ability to troubleshoot basic issues.
28. High willingness to learn, adapt, and grasp new technologies quickly.
29. Excellent verbal and written communication skills in English.
30. Understanding of networking & diagnosing system / vm related issues.
31. Understanding of cloud network architecture & administration techniques.
32. Exposure on AWS, Azure & GCP cloud platforms. 1.1.

Education

1. Bachelors in engineering in departments such as IT/EEE are preferred. ​