Duo Security Engineer

IDR, Inc.; Nashville (TN); On-site; USD 110,000 - 170,000; Full time

Benefits offered by this job

Full Benefits

Competitive compensation

Job summary

IDR, Inc. is seeking a Senior Access Management Engineer with deep hands-on experience in Cisco Duo and enterprise MFA/access management.

You will design, implement, and optimize Duo environments, migrating a global customer from Okta to Duo, and partner with clients to ensure secure access across apps, VPNs, and cloud platforms. This client-facing role requires strong IAM expertise, scripting ability, and the ability to drive technical decisions in fast-paced environments.

Qualifications

• 5+ years of IAM experience.
• Hands-on Cisco Duo (MFA, Auth Proxy, SSO, device trust, integrations, APIs).
• Knowledge of SAML, OAuth 2.0, OIDC, and RADIUS.
• Experience integrating with Active Directory / LDAP.
• Scripting in Python, PowerShell, or Bash.
• Strong client-facing communication and discovery facilitation.

Responsibilities

• Design and implement Cisco Duo solutions end-to-end (architecture through deployment and handoff)
• Configure and roll out Duo MFA policies, enrollment, and adoption strategies
• Deploy and manage Duo Authentication Proxy and integrations (RADIUS/LDAP/Active Directory)
• Implement SSO and federation integrations (SAML 2.0 / OIDC)
• Configure Device Trust / Trusted Endpoints policies
• Integrate Duo with enterprise apps, infrastructure, VPN/remote access, and cloud platforms
• Build/consume Duo APIs (Admin API/Auth API) and support automation/scripting
• Lead technical discovery sessions, document designs/runbooks, and troubleshoot complex auth issues

Skills

Cisco Duo

IAM

Scripting

Client-facing communication

Tools

Duo Admin API

Duo Auth Proxy

Job description

IDR is seeking a Senior Access Management Engineer with deep, hands‑on experience in Cisco Duo and enterprise MFA/access management. This is a highly technical, client‑facing role responsible for designing, implementing, integrating, and optimizing Duo environments. A near‑term project includes migrating a global customer from Okta to Duo, so platform migration experience is a strong plus.

Position Overview for the Senior Access Management Engineer

• Design and implement Cisco Duo solutions end-to‑end (architecture through deployment and handoff)
• Configure and roll out Duo MFA policies, enrollment, and adoption strategies
• Deploy and manage Duo Authentication Proxy and integrations (RADIUS/LDAP/Active Directory)
• Implement SSO and federation integrations (SAML 2.0 / OIDC)
• Configure Device Trust / Trusted Endpoints policies
• Integrate Duo with enterprise apps, infrastructure, VPN/remote access, and cloud platforms
• Build/consume Duo APIs (Admin API/Auth API) and support automation/scripting
• Lead technical discovery sessions, document designs/runbooks, and troubleshoot complex auth issues

Required qualifications for the Senior Access Management Engineer

• 5+ years of Identity & Access Management (IAM) experience
• Strong hands‑on expertise with Cisco Duo (MFA, Auth Proxy, SSO, device trust, integrations, APIs)
• Working knowledge of SAML, OAuth 2.0, OIDC, and RADIUS
• Experience integrating with Active Directory / LDAP
• Scripting ability in Python, PowerShell, or Bash
• Strong client‑facing communication skills; able to run discovery and drive technical decisions

What's in it for you?

• Competitive compensation package
• Full Benefits; Medical, Vision, Dental, and more!
• Opportunity to get in with an industry leading organization.

Why IDR?

• 25+ Years of Proven Industry Experience in 4 major markets
• Employee Stock Ownership Program
• Dedicated Engagement Manager who is committed to you and your success.
• Medical, Dental, Vision, and Life Insurance
• ClearlyRated's Best of Staffing Client and Talent Award winner 12 years in a row.