MFA Engineer

Overview:

The role is for a Identity Engineer in Core Infra IAM operations within Identity & Access Technology Services; responsible for definition of and the delivery of global solutions for both on premise and cloud solutions . The successful candidate will work with within the Core Infra IAM team and must possess relevant experience focused on designing, implementing, and maintaining robust multi-factor authentication solutions across enterprise systems and applications.

Role / Principal Accountabilities:

• The engineering function is responsible for engineering all aspects of core services infrastructure components.


• The candidate must be highly self-motivated team player with good oral and written skills and confidence to present to management.


• The candidate should also have a good sense of discipline for change control procedures.


• A flexible work ethic is required with the ability to form part of a multi-platform global engineering team

Skills & Experience Required:

• Demonstrate an ability to work well as part of a global team, and on their own when required.


• Strong oral and written communication.


• Enthusiastic, eager and personable.


• Ability to cope well under pressure.

Essentails:

• Experience of deploy Microsoft Authenticator / RSA / Cisco Duo for both on premise and cloud solutions.


• Design and implement MFA solutions using industry-standard protocols and best practices


• Develop and maintain authentication workflows for various user scenarios


• Configure and manage identity providers (IdPs) and authentication services


• Integrate MFA solutions with existing IAM infrastructure


• Troubleshoot authentication issues and security incidents

Desirables:

• Subject-matter expert knowledge of Unix/Linux OS and Shell scripting


• Proficiency coding in Python language


• Understanding of the following technologies: Load balancing concepts,SSO concepts, Apache, Tomcat, Perl, Ansible


• Strong experience with MFA technologies and protocols: TOTP/HOTP, Push notifications, Biometric authentication, Hardware security keys, (FIDO2/WebAuthn), SMS/Email verification


• Expertise in identity standards:OAuth 2.0, OpenID Connect, SAML 2.0


• Knowledge of PKI and cryptographic principles


• Ability to perform connectivity troubleshooting (tcpdump, wireshark, netstatm lsofm nc etc.)