Description
GuidePoint Security is hiring a Senior Access Management Engineer specializing in Cisco Duo to join our implementation team on a full-time basis. This is a fully remote role where we are looking for deep, hands-on experience leading Duo Security deployments, migrations, and integrations , with secondary proficiency in Okta and/or Ping Identity platforms to support broader Access Management engagements.
The Senior Access Management Engineer is responsible for designing, deploying, integrating, and optimizing Duo MFA and access solutions for some of the largest organizations in the US. This role serves as the go-to technical lead for all Duo engagements, owning architecture decisions, integration design, and delivery execution.
Responsibilities:
- Duo Security – Lead Engineer (Primary – 50%):
- Serve as the primary technical lead on all Duo Security engagements, owning end-to-end delivery from design through implementation and handoff
- Lead Duo deployment architecture and design, including Duo MFA policy design, user enrollment strategies, self-service portal configuration, and phased rollout planning
- Duo Authentication Proxy , Deployment, configuration, high availability, and integration with RADIUS, LDAP, and Active Directory
- Duo Single Sign-On (SSO) , SAML 2.0 and OIDC federation, application onboarding, and custom login branding
- Duo Device Trust , Trusted endpoint policies, certificate-based device verification, and managed/unmanaged device posture enforcement
- Okta & Ping Identity – Supporting Engineer (Secondary – 35%):
- Serve as a supporting engineer on Okta and Ping Identity engagements when Duo workload permits, working under the direction of the engagement's lead architect
- Contribute hands-on technical work on Okta engagements, including application integration, SSO configuration, MFA policy configuration, and adaptive access policies
- Project Ownership & Client Success (10%):
- Serve as the technical project owner on Duo engagements, taking full accountability for successful delivery and client outcomes
- On Okta/Ping engagements, support the lead architect with clear status updates, task completion, and proactive communication of blockers
- Presales Support & Business Development (5%):
- Provide Duo-focused technical expertise during the presales process to support new business opportunities
- Assist with technical discovery, scoping, and requirements gathering for prospective Duo and MFA engagements
Requirements:
- Bachelor’s degree in computer science, Information Security, or related field , or equivalent work experience
- 5+ years of experience in Identity and Access Management, with a strong emphasis on MFA and access security
- Deep, hands-on experience with Cisco Duo Security, including Duo MFA policy design, deployment, and administration
- Working proficiency with at least one of the following: Okta , Application integration, SSO, MFA, Lifecycle Management, directory integrations; Ping Identity , PingFederate, PingOne, PingAccess configuration and administration
- Strong understanding of SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and RADIUS protocols
- Proficiency with Python, PowerShell, or Bash for automation and API integrations