Description
The Zero Trust OS Logon & Enterprise Applications team at Cisco Duo designs and engineers the foundational low-level authentication software that secures critical Windows and macOS enterprise endpoints across tens of thousands of global organizations.
You will tackle high-stakes systems challenges,from low-level Windows Credential Providers and ADFS adapters to cutting-edge passwordless architectures,where the code you write executes at the very core of operating system security.
Your Impact
- Design and implement high-performance, memory-safe endpoint authentication components and enterprise integrations using Modern C++ (C++17/20) and native Win32 APIs to deliver resilient Zero Trust security at operating system logon.
- Lead the technical design and hardening of custom Windows Credential Providers, ADFS MFA adapters, and WTS multi-session services to eliminate authentication latency and prevent credential bypass attacks.
- Develop automated diagnostic utilities and robust administrative tooling using PowerShell and WMI/CIM to streamline enterprise-scale deployment and enhance sysadmin manageability.
- Partner closely with Product Management, Security Architecture, and Design to author Architectural Decision Records (ADRs) and establish comprehensive automated test pipelines to guarantee zero-regression releases.
- Mentor peer engineers through insightful code reviews and technical guidance to foster engineering excellence and accelerate team delivery velocity.
Minimum Qualifications
- Bachelor's degree in computer science, computer engineering, or a related technical field (or equivalent practical experience).
- 6+ years of professional systems software engineering experience using Modern C++ (C++14/17/20) or C.
- Experience developing native Windows desktop or server applications using Win32 APIs, multi-threading synchronization primitives, and IPC.
- Experience administering or integrating with on-premises Active Directory (AD DS), Kerberos authentication protocols, or Windows Server environments.
- Experience authoring PowerShell scripts or utilizing WMI/CIM for Windows system automation, configuration, and troubleshooting.
Preferred Qualifications
- Custom Credential & Security Architecture: Direct experience developing custom Windows Credential Providers, LSA authentication packages, or Active Directory Federation Services (ADFS) MFA adapters.
- Diagnostics & Low-Level Debugging: Hands-on experience debugging user-mode crashes, race conditions, and deadlocks using WinDbg, ETW tracing, or Visual Studio diagnostic tools.
- Enterprise Deployment Engineering: Experience authoring enterprise MSI installer customizations, Group Policy Administrative Templates (.admx/.adml), or GPO deployment workflows.
- Modern Identity & Passwordless Auth: Familiarity with modern authentication protocols, FIDO2/WebAuthn, Passwordless logon architectures, or Microsoft Entra ID (Azure AD) hybrid join.
- Technical Leadership & Mentorship: Demonstrated technical leadership experience authoring Architectural Decision Records (ADRs), conducting structured code reviews, and mentoring fellow engineers.
The starting salary range posted for this position is $139,300.00 to $203,600.00 and reflects the projected salary range for new hires in this position in U.S. and/or Canada locations, not including incentive compensation*, equity, or benefits.