Duo Security Engineer

IDR is seeking a Senior Access Management Engineer with deep, hands-on experience in Cisco Duo and enterprise MFA/access management. This is a highly technical, client-facing role responsible for designing, implementing, integrating, and optimizing Duo environments. A near-term project includes migrating a global customer from Okta to Duo, so platform migration experience is a strong plus. Position Overview for the Senior Access Management Engineer Design and implement Cisco Duo solutions end-to-end (architecture through deployment and handoff) Configure and roll out Duo MFA policies, enrollment, and adoption strategies Deploy and manage Duo Authentication Proxy and integrations (RADIUS/LDAP/Active Directory) Implement SSO and federation integrations (SAML 2.0 / OIDC) Configure Device Trust / Trusted Endpoints policies Integrate Duo with enterprise apps, infrastructure, VPN/remote access, and cloud platforms Build/consume Duo APIs (Admin API/Auth API) and support automation/scripting Lead technical discovery sessions, document designs/runbooks, and troubleshoot complex auth issues Required qualifications for the Senior Access Management Engineer 5+ years of Identity & Access Management (IAM) experience Strong hands-on expertise with Cisco Duo (MFA, Auth Proxy, SSO, device trust, integrations, APIs) Working knowledge of SAML, OAuth 2.0, OIDC, and RADIUSExperience integrating with Active Directory / LDAPScripting ability in Python, PowerShell, or BashStrong client-facing communication skills; able to run discovery and drive technical decisions