Identity Security Engineer; Duo Security

Thanks for the click. We know your time is valuable so we will get right to it.

We’ve amassed some of the best and brightest minds in cyber security who are passionate about protecting the digital world. Our team blends advanced technology alongside deep expertise to tackle the toughest cyber threats out there. Put simply, our mission is to stay ahead of the curve and create a safer digital landscape for our partners, and we think adding an Identity Security Engineer (Duo Security) will up our cyber game.

We are seeking an experienced MFA / Identity Security Engineer with deep hands‑on expertise implementing, configuring, troubleshooting, and supporting Cisco Duo Security solutions in enterprise environments.

The ideal candidate will have significant experience with Duo Authentication Proxy, including both LDAP and RADIUS-based integrations, as well as experience implementing and supporting Duo Single Sign-On (SSO). This position requires a strong understanding of authentication protocols, Active Directory, network security, identity providers, and enterprise application integration.

Experience with Microsoft Entra  (Azure AD) is highly desirable. Previous experience implementing or supporting RSA SecurID is also valuable, particularly for organizations migrating from legacy RSA authentication environments to Duo.

This is a highly technical, hands‑on engineering role intended for someone who can independently design, deploy, troubleshoot, document, and support MFA solutions across diverse customer and enterprise environments

• Design, deploy, configure, and support Cisco Duo Security MFA solutions across a variety of enterprise applications, infrastructure platforms, and remote‑access technologies.
• Install, configure, upgrade, and troubleshoot Duo Authentication Proxy servers.
• Configure Duo Authentication Proxy integrations using:
  • RADIUS
  • LDAP / LDAPS
  • Active Directory
  • Other Duo‑supported authentication configurations as required.
• Integrate Duo MFA with technologies such as:
  • Firewalls
  • Remote‑access VPN solutions
  • Windows servers
  • Network infrastructure
  • Privileged administrative systems
• Design and implement resilient Duo Authentication Proxy architectures, including redundant proxy servers and appropriate failover configurations.
• Implement and support Duo Single Sign-On (SSO).
• Configure SAML‑based integrations between Duo and SaaS or internally hosted applications.
• Integrate Duo SSO with enterprise identity directories and identity providers.
• Troubleshoot SAML authentication, assertions, claims, certificates, metadata, redirects, and application configuration issues.
• Configure and support Duo Universal Prompt integrations.
• Configure Duo application policies, authentication policies, user enrollment policies, device policies, trusted networks, and other access‑control settings.
• Assist with deployment and troubleshooting of Duo integrations with Microsoft Windows environments, including Active Directory and Windows Logon/RDP.
• Analyze authentication logs and application logs to diagnose MFA, RADIUS, LDAP, SAML, networking, certificate, and directory‑related issues.
• Perform packet‑level troubleshooting when required using tools such as Wireshark, tcpdump, firewall packet captures, and related diagnostic utilities.
• Work with firewall and networking teams to identify connectivity, routing, NAT, DNS, certificate, and firewall‑policy issues affecting authentication services.
• Maintain secure configuration standards for authentication infrastructure.
• Develop implementation plans, technical documentation, diagrams, configuration standards, and troubleshooting procedures.
• Participate in migrations from existing MFA platforms, including RSA SecurID, to Cisco Duo.
• Assist with evaluating existing authentication…