Senior Access Management Engineer - Duo / MFA Specialist (Remote in the U.S.)

The role

The Senior Access Management Engineer will design, deploy, and optimize Duo MFA and access solutions for large organizations. This person will serve as the technical lead for Duo engagements and support Okta or Ping Identity projects as needed.

What you will do

• Serve as the primary technical lead on Duo Security engagements
• Lead Duo deployment architecture and design
• Design and implement Duo integrations across VPN, remote access, and cloud platforms
• Plan and execute Duo-to-Duo and competitive migrations
• Develop automation scripts using Python, PowerShell, or Bash
• Conduct security reviews of Duo configurations
• Develop and maintain technical documentation and architecture diagrams
• Support Okta and Ping Identity engagements as a supporting engineer
• Serve as the technical project owner on Duo engagements
• Provide Duo-focused technical expertise during the presales process

Required qualifications

• Bachelor’s degree in computer science, Information Security, or related field or equivalent work experience
• 5+ years of experience in Identity and Access Management
• Deep, hands-on experience with Cisco Duo Security
• Working proficiency with at least one of the following: Okta or Ping Identity
• Strong understanding of SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and RADIUS protocols
• Proficiency with Python, PowerShell, or Bash for automation and API integrations
• Experience integrating MFA solutions with VPN, Citrix, RD Gateway/NPS, and cloud platforms
• Familiarity with Active Directory, LDAP, and enterprise directory services
• Experience with endpoint management platforms (Intune, Jamf, Workspace ONE)
• Strong understanding of Zero Trust principles, least-privilege access, and identity security best practices
• Ability to own technical delivery and work independently with minimal oversight
• Sedentary work requiring movement of wrists, hands, and/or fingers for 8 hours a day

Nice to have

• Experience with Duo-to-Okta or Duo-to-Entra ID migration projects
• Hands-on experience with both Okta and Ping Identity platforms
• Familiarity with Okta Workflows
• Experience with PingFederate federation hub architecture
• Experience with DaVinci orchestration (Ping Identity)
• Familiarity with Microsoft Entra ID / Azure AD
• Infrastructure-as-code experience (Terraform, Ansible)
• Cisco Duo certifications
• Okta Certified Professional / Administrator / Consultant
• Ping Identity Certified Professional

Benefits

• Group Medical Insurance options
• Group Dental Insurance
• 12 corporate holidays
• Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months
• Pet Benefit Option

About the company

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. It is a rapidly growing, profitable, privately-held value added reseller.