Senior Access Management Engineer – Duo, MFA Specialist
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior Access Management Engineer leading Cisco Duo MFA deployments, integrations, and migrations. Supporting Okta and Ping Identity projects for GuidePoint Security’s cybersecurity clients.
Responsibilities:
- Lead end-to-end Duo Security engagements from design through implementation and handoff
- Design and deploy Duo MFA, Authentication Proxy, SSO, Device Trust, Network Gateway, Admin API, Auth API, Trusted Endpoints, and Duo Desktop solutions
- Integrate Duo with VPN concentrators, remote access platforms, web applications, cloud platforms, Windows RDP, SSH, and legacy applications
- Plan and execute Duo-to-Duo and competitive MFA platform migrations
- Develop Python, PowerShell, and Bash automation scripts for bulk operations, reporting, lifecycle management, and integration testing
- Design phased MFA rollout strategies, pilot groups, communication plans, and exception workflows
- Conduct Duo security configuration reviews and identify policy, bypass, and device-trust risks
- Maintain technical documentation, architecture diagrams, runbooks, implementation guides, and knowledge-transfer materials
- Support Okta and Ping Identity projects under a lead architect, including SSO, MFA, lifecycle management, directory integrations, workflows, migrations, and testing
- Own technical delivery and client outcomes on Duo engagements
- Provide status updates, communicate blockers, delegate tasks, and mentor junior engineers
- Develop SOPs, delivery templates, and Duo best-practice frameworks
- Support presales discovery, scoping, requirements gathering, LOE estimates, SOW development, solution architectures, roadmaps, presentations, and demonstrations
Requirements:
- Bachelor’s degree in computer science, Information Security, or related field — or equivalent work experience
- 5+ years of experience in Identity and Access Management, with strong emphasis on MFA and access security
- Deep, hands-on experience with Cisco Duo Security
- Experience with Duo MFA policy design, deployment, and administration
- Experience with Duo Authentication Proxy, including RADIUS, LDAP, and Active Directory
- Experience with Duo SSO using SAML 2.0 and OIDC
- Experience integrating Duo across VPN, remote access, web applications, and infrastructure
- Experience with Duo Admin API and Auth API
- Experience with Duo Device Trust and Trusted Endpoints
- Working proficiency with Okta or Ping Identity
- Strong understanding of SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and RADIUS
- Proficiency with Python, PowerShell, or Bash
- Experience integrating MFA with VPN, Citrix, RD Gateway/NPS, and cloud platforms
- Familiarity with Active Directory, LDAP, and enterprise directory services
- Experience with Intune, Jamf, or Workspace ONE for device trust
- Strong understanding of Zero Trust, least-privilege access, and identity security best practices
- Ability to own technical delivery, manage client expectations, and work independently with minimal oversight
- Willingness to embrace emerging technologies, including AI tools
- Sedentary work and substantial wrist, hand, and/or finger movement for at least 8 hours daily
- Close visual acuity for computer terminal viewing and/or extensive reading for at least 8 hours daily
Benefits:
- Remote workforce primarily (U.S. based only)
- Some travel may be required for certain positions
- Group Medical Insurance options, including Zero Deductible PPO and High Deductible Health Plan with HSA
- GuidePoint pays 90% of employee PPO premiums and 70% of family PPO premiums
- GuidePoint pays 100% of employee HDHP premiums and 75% of family HDHP premiums
- HSA contributions of $850 annually for employees and $1,750 annually for families
- Group Dental Insurance; GuidePoint pays 100% of employee premiums and 75% of family premiums
- 12 corporate holidays
- Flexible Time Off (FTO) program
- Healthy mobile phone and home internet allowance
- Eligibility for retirement plan after 2 months at open enrollment
- Pet Benefit Option
- Latest vendor training available
- Unlimited PTO benefit
- Regular feedback and coaching
- Opportunities for career growth and future leadership, Architect, or security-discipline roles
Similar Jobs
Senior Cloud Identity Engineer
Senior Cloud Identity Engineer securing Redcare Pharmacy’s Microsoft cloud identity ecosystem. Automating governance, workload identities and Zero Trust controls for Europe’s leading e-pharmacy.
Senior Cloud Identity Engineer
Senior Cloud Identity Engineer automating Microsoft Entra governance and identity security. Strengthening Redcare Pharmacy’s secure, scalable e-pharmacy cloud platform across Azure and AI workloads.
Senior Cloud Identity Engineer
Senior Cloud Identity Engineer building secure, automated Microsoft Cloud identity solutions for Europe’s leading e-pharmacy. Advancing Zero Trust, governance, and least-privilege security across Azure and AI platforms.
HPC Development Engineer
HPC Development Engineer designing and supporting CIQ’s enterprise Linux, cloud, and HPC infrastructure. Developing Go-based solutions, improving system performance, and guiding architecture and deployments.
Fuels Neutronics & TH Methods Engineer
Fuels neutronics and thermal-hydraulics engineer developing nuclear engineering methods, models, and analyses. Supporting Framatome’s carbon-free energy technologies and customer solutions.
Escalator Engineer
Escalator Engineer maintaining and repairing safety-critical escalators across Scotland’s Central Belt. Supporting Stannah’s global lift and mobility-equipment manufacturing and service business.
Lift Repair Engineer
Lift Repair Engineer repairing and fault-finding lifts for Stannah, a global access and mobility manufacturer. Covering commercial, residential, and public sites around Salisbury.
Lift Engineer
Lift Engineer maintaining, repairing, and servicing lifts and stairlifts for Stannah, a family-owned access and mobility manufacturer. Managing on-site works across Nottingham and surrounding areas.
Lift Engineer
Lift Engineer maintaining, repairing, and servicing lifts and stairlifts for Stannah, a global access and mobility engineering company. Covering Leicester, Lincoln, and surrounding areas.
Lift Engineer
Lift Engineer servicing, repairing, and maintaining lifts across Guildford and surrounding areas. Supporting safe access equipment for Stannah, a global manufacturer and service provider.
Lift Engineer
Lift Engineer servicing, repairing, and fault-finding lifts across Glasgow for Stannah, a global manufacturer of lifts, escalators, and homelifts. Maintaining safe, compliant commercial, residential, and public sites.
Lift Repair Engineer
Lift Repair Engineer repairing and fault-finding lifts across East Anglia for Stannah, a global manufacturer of lifts and accessibility products. Managing breakdowns, component replacements, and site records.
Lift Repair Engineer
Lift Repair Engineer repairing and maintaining lifts across Chichester for Stannah, a global lifts and accessibility manufacturer. Diagnosing faults, replacing components, and responding to breakdowns.
Lift Engineer
Lift Engineer servicing and repairing lifts across Cambridge for Stannah, a global manufacturer and maintenance provider. Managing a local route covering commercial, residential, and public sites.
Lift Engineer
Lift Engineer servicing, repairing, and maintaining lifts across Bury St Edmunds for Stannah, a lift and stairlift engineering company. Managing a structured local route across commercial, residential, and public sites.
Senior Ontology Engineer
Senior Ontology Engineer building BFO/CCO-aligned ontologies, RDF knowledge graphs, and GenAI applications. Developing Python, web, and AWS services for a U.S. defense customer.
Software Packaging Engineer
Software Packaging Engineer building and validating Windows and macOS packages for PDQ’s device-management products. Troubleshooting package failures and improving packaging tools and processes.
Senior Backend Engineer, Trusted Agentic Development
Senior Backend Engineer building trusted AI-agent validation platforms at GitLab, an intelligent DevSecOps orchestration company. Developing language-aware feedback systems for Rust, Ruby, and Go.
Professional Services Engineer, 911 Systems
Professional Services Engineer deploying Axon 911 cloud call-handling platforms for public safety agencies. Leading customer implementations, technical training, integrations, and troubleshooting.
Staff Backend Engineer – Trust & Control Safety Systems
Staff Backend Engineer architecting Trust, Controls & Safety systems for HighLevel's AI-powered business operating system. Securing high-volume workflows, transactions, and billing against fraud and unintended usage.