Authentication Engineer

We are seeking a technically focused and detail-oriented Authentication Engineer to join our client's Cybersecurity Operations team. This role is dedicated to the deployment, management, and continuous improvement of enterprise authentication systems, with a particular emphasis on Multi-Factor Authentication (MFA) and modern identity protocols. If you bring deep technical knowledge of authentication systems, experience integrating them across complex enterprise environments, and the communication skills to support both technical teams and end users, we want to hear from you.

Role Description: You will work at the intersection of identity security and user experience, ensuring that authentication systems are correctly configured, performing reliably at scale, and aligned with the organization's security policies. This is a proactive role where you will identify gaps in authentication coverage, evaluate emerging authentication technologies, and work across teams to drive adoption and strengthen the organization's overall identity security posture.

Day-to-day responsibilities include:

Deploying, configuring, and administering enterprise MFA platforms and related authentication services

Integrating MFA and Single Sign-On (SSO) capabilities with Active Directory, Entra ID, and enterprise applications

Troubleshooting authentication failures across complex, multi-system environments and coordinating resolution with support teams

Developing, documenting, and enforcing authentication policies aligned with organizational security standards and zero-trust principles

Supporting risk assessments and security continuous monitoring efforts related to identity and authentication

Partnering with end users, help desk, and project teams to drive MFA adoption at scale

Required Qualifications & Education:

8-10 years of overall IT experience with a minimum of 3–5 years of experience in identity and access management, with direct hands‑on experience deploying and managing enterprise authentication and MFA solutions. Candidates with experience supporting large‑scale MFA deployments or authentication migrations will be highly preferred.

Hands‑on experience deploying and managing enterprise MFA platforms (e.g., Okta, Microsoft Authenticator, Duo, RSA SecurID, or equivalent)

Strong understanding of modern identity and authentication protocols including SAML, OAuth 2.0, OpenID Connect, and RADIUS

Experience integrating MFA solutions with Active Directory, Entra ID (formerly Azure Active Directory), and Single Sign-On (SSO) platforms

Ability to troubleshoot authentication failures across complex, multi‑system enterprise environments

Experience developing and enforcing MFA policies aligned with organizational security standards and zero‑trust principles

Identity & Access Management

Working knowledge of enterprise identity and access management (IAM) frameworks and platforms

Familiarity with Microsoft Active Directory, Entra ID (formerly Azure Active Directory), and related Windows‑based systems

Understanding of privileged access management (PAM) concepts and how authentication controls integrate within that model

Ability to support risk assessments and security continuous monitoring efforts related to identity and authentication

Ability to support large, cross‑functional projects and communicate clearly with both technical and non‑technical stakeholders

Experience creating and maintaining clear documentation for authentication configurations, procedures, and troubleshooting guides

Comfortable working with end users and support teams to resolve authentication issues and support MFA adoption at scale

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field preferred

Relevant certifications such as Microsoft Identity and Access Administrator (SC-300), Security+, CISSP, or equivalent are strongly preferred

Desired Qualifications:

Scripting and automation experience in PowerShell, Bash, Perl, or VBScript to support authentication administration and reporting

Experience with cloud‑based identity platforms such as Microsoft Azure or AWS IAM

Familiarity with WebAuthn / FIDO2 and passwordless authentication technologies

Knowledge of zero‑trust security principles and how modern authentication fits within that framework

Clearance and Location Requirements:

Candidates must be eligible to obtain and maintain a Public Trust security clearance.

This is a hybrid position with on‑site support requirements at the client location in the Washington, D.C. and Manassas, VA; specific on‑site and telework expectations will be confirmed at the time of hire.

#J-18808-Ljbffr