Job Description
The Opportunity:
Apex Security Solutions is seeking a world-class Two-Factor Authentication (2FA) Engineer to architect and implement next-generation identity protection for our enterprise clients. As cyber threats evolve, so does our defense. You will be at the forefront of securing digital identities, ensuring that only authorized users gain access to critical systems through robust, user-friendly, and impenetrable multi-factor protocols.
Why Join Us?
- Industry Leadership: Work with Fortune 500 companies to redefine their security posture.
- Modern Tech Stack: Leverage the latest in OAuth 2.0, OpenID Connect, and FIDO2/WebAuthn standards.
- Impact: Your work will directly prevent data breaches and protect user privacy on a massive scale.
Key Responsibilities:
- Architect Authentication Systems: Design scalable, high-availability 2FA infrastructure supporting TOTP, SMS, Push notifications, and hardware security keys (YubiKey).
- Security Auditing: Conduct rigorous penetration testing and vulnerability assessments on authentication flows to identify and remediate potential bypass vectors.
- Integration Leadership: Integrate advanced 2FA solutions into legacy systems and modern Single Sign-On (SSO) platforms (e.g., Okta, Azure AD, Auth0).
- Compliance Management: Ensure all authentication mechanisms comply with HIPAA, SOC2, and GDPR standards.
- Performance Optimization: Monitor and optimize authentication latency to ensure a seamless user experience without compromising security.
Qualifications:
- Education: Bachelor’s degree in Computer Science, Information Security, or a related field; Master’s degree preferred.
- Experience: 5+ years of experience in cybersecurity, specifically focusing on Identity and Access Management (IAM) and Multi-Factor Authentication (MFA).
- Technical Skills: Deep understanding of cryptographic protocols (AES, RSA, ECC), protocols (OAuth 2.0, SAML, OIDC), and standard libraries (WebAuthn, FIDO2).
- Programming: Proficiency in Python, Go, or Java for backend implementation and scripting.
- Certifications: CISSP, CISM, or equivalent security certifications are highly desirable.
- Problem Solving: Exceptional ability to troubleshoot complex security scenarios and design resilient countermeasures.
Responsibilities
- Design and deploy enterprise-grade 2FA solutions (TOTP, SMS, Push, Hardware Keys).
- Conduct security audits and penetration testing on authentication layers.
- Integrate 2FA with SSO providers (Okta, Azure AD).
- Ensure compliance with SOC2, HIPAA, and GDPR regulations.
- Optimize authentication latency and user experience.
Qualifications
- 5+ years in IAM or Security Engineering.
- Strong knowledge of OAuth 2.0, OIDC, and SAML.
- Proficiency in Python, Go, or Java.
- CISSP or CISM certification preferred.
- Bachelor’s degree in Computer Science or related field.