Design and deliver scalable and secure enterprise authentication solutions
Build and maintain services supporting MFA, PR-MFA, and CBA
Implement registration, recovery, and operational workflows
Support PR-MFA and certificate-based rollout patterns
Integrate MFA into IdP, SSO, VPN, and endpoint platforms
Apply FIDO2/passkey and CBA (PKI, certificates) concepts in production systems
Support hardware authenticator enrollment and recovery
Build dashboards for rollout and support metrics
Mentor junior engineers
Requirements
Bachelor's degree in a related field and 8+ years experience in software engineering and/or cybersecurity
Strong software engineering experience building enterprise-grade services and APIs
Solid understanding of authentication, authorization, and assurance levels
Practical experience with FIDO2 security keys/passkeys and Certificate-based authentication (CBA) using PIV / Smart Cards and X.509 certificates
Familiarity with risk-based or adaptive MFA concepts and step-up authentication flows
Experience across Windows, macOS, iOS, and Android platforms
Understanding of common MFA threats (phishing, MFA fatigue)
Strong collaboration skills and desire to learn modern MFA technologies
Option 1: Bachelor's degree in computer science, information technology, engineering, information systems, cybersecurity, or related area and 4 years’ experience in software engineering or related area at a technology, retail, or data-driven company.
Option 2: 6 years’ experience in software engineering or related area at a technology, retail, or data-driven company.
Certification in Security+, GISF, GSEC, CISSP, or CCSP.
Master’s degree in computer science, information technology, engineering, information systems, cybersecurity, or related area and 2 years’ experience leading information security or cybersecurity projects.