Administer multi-factor authentication, federation, and PKI services, including Active Directory Federation Services, RSA authentication, smart card/CAC authentication, certificates, relying-party trusts, claims rules, authentication agents, and certificate lifecycle management. Ensure system-state backups, replication recovery, certificate recovery, restore procedures, and alternate-site activation processes are documented, tested, and capable of meeting approved recovery objectives during outages, cyber incidents, facility disruptions, maintenance events, or COOP activation.