Senior Access Management Engineer – Duo, MFA Specialist

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee comprehensive Duo Security projects from initial design to implementation and final handoff.

• Create and implement Duo MFA, Authentication Proxy, SSO, Device Trust, Network Gateway, Admin API, Auth API, Trusted Endpoints, and Duo Desktop solutions.

• Integrate Duo with VPN concentrators, remote access platforms, web applications, cloud platforms, Windows RDP, SSH, and legacy software.

• Strategize and carry out migrations from Duo to Duo and other competitive MFA platforms.

• Write automation scripts in Python, PowerShell, and Bash for bulk operations, reporting, lifecycle management, and integration testing.

• Develop phased strategies for MFA rollouts, including pilot groups, communication plans, and exception workflows.

• Perform security configuration reviews for Duo and identify risks related to policy, bypass, and device trust.

• Keep technical documentation, architecture diagrams, runbooks, implementation guides, and knowledge-transfer materials up to date.

• Assist with Okta and Ping Identity projects under the guidance of a lead architect, covering SSO, MFA, lifecycle management, directory integrations, workflows, migrations, and testing.

• Take responsibility for technical delivery and client outcomes on Duo projects.

• Provide regular status updates, address blockers, delegate tasks, and mentor junior engineers.

• Create SOPs, delivery templates, and frameworks for Duo best practices.

• Aid in presales activities including discovery, scoping, requirements gathering, LOE estimates, SOW development, solution architectures, roadmaps, presentations, and demonstrations.

⛳️ Requirements

• Bachelor’s degree in computer science, Information Security, or a related field, or equivalent professional experience.

• Over 5 years of experience in Identity and Access Management, focusing heavily on MFA and access security.

• Extensive hands-on experience with Cisco Duo Security.

• Proficient in designing, deploying, and administering Duo MFA policies.

• Familiarity with Duo Authentication Proxy, including RADIUS, LDAP, and Active Directory.

• Experience with Duo SSO utilizing SAML 2.0 and OIDC.

• Proven track record of integrating Duo with VPNs, remote access solutions, web applications, and infrastructure.

• Proficient with Duo Admin API and Auth API.

• Experience with Duo Device Trust and Trusted Endpoints.

• Working knowledge of Okta or Ping Identity.

• Strong understanding of SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and RADIUS protocols.

• Proficient in Python, PowerShell, or Bash scripting.

• Experience integrating MFA with VPN, Citrix, RD Gateway/NPS, and cloud services.

• Familiar with Active Directory, LDAP, and enterprise directory services.

• Experience with Intune, Jamf, or Workspace ONE for device trust management.

• Solid understanding of Zero Trust principles, least-privilege access, and identity security best practices.

• Ability to manage technical delivery, meet client expectations, and work independently with minimal supervision.

• Openness to adopting emerging technologies, including AI tools.

• Capability to perform sedentary work with significant wrist, hand, and/or finger movement for at least 8 hours daily.

• Close visual acuity for tasks involving computer terminal usage and extensive reading for at least 8 hours daily.

🏝️ Benefits

• Primarily remote workforce (U.S. based only).

• Some travel may be necessary for specific roles.

• Group Medical Insurance options available, including Zero Deductible PPO and High Deductible Health Plan with HSA.

• GuidePoint covers 90% of employee PPO premiums and 70% of family PPO premiums.

• GuidePoint pays 100% of employee HDHP premiums and 75% of family HDHP premiums.

• Annual HSA contributions of $850 for employees and $1,750 for families.

• Group Dental Insurance; GuidePoint pays 100% of employee premiums and 75% of family premiums.

• 12 corporate holidays.

• Flexible Time Off (FTO) program.

• Mobile phone and home internet allowance for a healthy work-life balance.

• Eligibility for the retirement plan after 2 months during open enrollment.

• Pet Benefit Option available.

• Access to the latest vendor training.

• Unlimited PTO benefit.

• Regular feedback and coaching provided.

• Opportunities for career growth and future leadership roles, including Architect or security-discipline positions.