MFA Engineer

Overview:

The role is for a Identity Engineer in Core Infra IAM operations within Identity & Access Technology Services; responsible for definition of and the delivery of global solutions for both on premise and cloud solutions. The successful candidate will work with within the Core Infra IAM team and must possess relevant experience focused on designing, implementing, and maintaining robust multi-factor authentication solutions across enterprise systems and applications.

Role / Principal Accountabilities:

• The engineering function is responsible for engineering all aspects of core services infrastructure components. 
• The candidate must be highly self-motivated team player with good oral and written skills and confidence to present to management.
• The candidate should also have a good sense of discipline for change control procedures.
• A flexible work ethic is required with the ability to form part of a multi-platform global engineering team

Skills & Experience Required:

• Demonstrate an ability to work well as part of a global team, and on their own when required.
• Strong oral and written communication.
• Enthusiastic, eager and personable.
• Ability to cope well under pressure.

Essentails:

• Experience of deploy Microsoft Authenticator / RSA / Cisco Duo for both on premise and cloud solutions.
• Design and implement MFA solutions using industry-standard protocols and best practices
• Develop and maintain authentication workflows for various user scenarios
• Configure and manage identity providers (IdPs) and authentication services
• Integrate MFA solutions with existing IAM infrastructure
• Troubleshoot authentication issues and security incidents

Desirables:

• Subject-matter expert knowledge of Unix/Linux OS and Shell scripting
• Proficiency coding in Python language
• Understanding of the following technologies:  Load balancing concepts,SSO concepts, Apache, Tomcat, Perl, Ansible
•  Strong experience with MFA technologies and protocols: TOTP/HOTP, Push notifications, Biometric authentication, Hardware security keys, (FIDO2/WebAuthn), SMS/Email verification
• Expertise in identity standards:OAuth 2.0, OpenID Connect, SAML 2.0
• Knowledge of PKI and cryptographic principles
• Ability to perform connectivity troubleshooting (tcpdump, wireshark, netstatm lsofm nc etc.)