Own the enterprise MFA architecture, including PR-MFA and certificate-based authentication
Design and operate services supporting registration, lifecycle, recovery, and break-glass
Define PR-MFA rollout patterns that drive adoption with strong assurance
Integrate MFA across IdP, SSO, VPN, Windows, macOS, iOS, and Android
Apply FIDO2/passkey concepts (WebAuthn, CTAP, attestation) and CBA concepts (PKI, certificate lifecycle, trust chains)
Lead hardware authenticator (YubiKey) programs, including enrollment and recovery
Define and track adoption and friction metrics
Serve as a technical authority and mentor senior engineers

Bachelor's degree in a related field and 14+ years experience in software engineering and/or cybersecurity with deep IAM focus
Strong software engineering experience building enterprise-grade, high-scale services and APIs
Deep understanding of authentication and MFA fundamentals, assurance levels (AAL2/AAL3), and context-aware and risk-based MFA patterns
Strong knowledge of MFA threats (phishing, MFA fatigue, relay attacks, recovery abuse)
Hands-on experience implementing PR-MFA using:
FIDO2 security keys and passkeys
Certificate-based authentication (CBA) using PIV / Smart Cards and X.509 certificates
Deep experience across Windows, macOS, iOS, and Android platforms (including Windows Hello for Business and platform authenticators)
Proven ability to design MFA for large, diverse enterprise user populations
Ability to evaluate security, usability, and operational tradeoffs
Strong awareness of industry standards and trends (FIDO Alliance, PIV, NIST 800-63, Zero Trust, PKI-based authentication)

Principal Software Engineer, Information Security

Key skills