Senior Access Management Engineer - Duo / MFA Specialist (Remote in the U.S.)

📋 Description

• Serve as the primary technical lead on all Duo Security engagements, owning end-to-end delivery
• Lead Duo deployment architecture and design, including Duo MFA, Duo Authentication Proxy, Duo
• Design and implement Duo integrations across VPN concentrators, remote access platforms, web
• Plan and execute Duo-to-Duo migrations (e.g., tenant consolidation) and competitive migrations (Duo
• Develop automation scripts (Python, PowerShell, Bash) leveraging Duo Admin API for bulk operations
• Design phased MFA rollout strategies with user communication plans, pilot groups, and exception

🎯 Requirements

• Bachelor's degree in Computer Science, Information Security, or related field, or equivalent work
• 5+ years of experience in Identity and Access Management, with strong emphasis on MFA and access
• Deep hands-on experience with Cisco Duo Security, including Duo MFA policy design, deployment, and
• Experience with Duo Authentication Proxy deployment and configuration (RADIUS, LDAP, AD)
• Experience with Duo SSO configuration (SAML 2.0, OIDC)
• Experience with Duo integrations across VPN, remote access, web applications, and infrastructure

🎁 Benefits

• Remote workforce primarily (U.S. based only; some travel may be required for certain positions)
• Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% for employees, 70%
• HSA contribution: $850 per EE annually / $1,750 per family annually (in 4 equal quarterly
• Group Dental Insurance: GuidePoint pays 100% for employees and 75% for family plans
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance