Senior Access Management Engineer - Duo / MFA Specialist (Remote in the U.S.)

Role overview A fully remote opportunity for a senior access management engineer to lead enterprise multi-factor authentication deployments for large US organizations. The role centers on Duo Security as the primary platform, owning architecture, integration design, and end-to-end delivery, with secondary work on Okta and Ping Identity identity projects when Duo capacity allows.

Responsibilities - Serve as the lead technical engineer on Duo engagements, owning design, implementation, and customer handoff - Design and deploy Duo MFA policies, enrollment flows, self-service portals, and phased rollout plans - Configure Duo Authentication Proxy for high availability and integration with RADIUS, LDAP, and Active Directory - Implement Duo SSO using SAML 2.0 and OIDC federation, application onboarding, and custom login branding - Configure Device Trust, Trusted Endpoints, and Network Gateway for certificate-based verification and remote access to internal apps - Operate the Duo Admin Panel and APIs for tenant configuration, custom scripting, and reporting - Contribute to Okta and Ping Identity engagements as a supporting engineer when Duo work allows

Requirements - Extensive hands-on experience leading Duo Security deployments, migrations, and integrations - Deep knowledge of MFA, SSO, device trust, and adaptive access policies at scale - Working familiarity with Okta and/or Ping Identity access management platforms - Experience with infrastructure-as-code tooling such as Terraform or Ansible for identity deployments - Professional certifications such as Cisco Duo, Okta Professional/Administrator/Consultant, Ping Identity, CISSP, or CISM

Nice to have - Background integrating Duo with endpoint management platforms like Intune, Jamf, or Workspace ONE - Experience delivering identity programs in consulting or professional services contexts

Benefits and work setup - Fully remote role based in the United States - Flexible time off plus twelve paid corporate holidays - Group medical and dental coverage with employer contribution, HSA option, retirement plan eligibility, mobile and internet allowance, and optional pet benefits