Job Description
About Apex Cyber Systems
Apex Cyber Systems is a leader in next-generation digital security solutions, protecting enterprise infrastructure against evolving threats. We are seeking a highly skilled Senior Security Engineer to spearhead our Identity and Access Management (IAM) initiatives, with a specific focus on advancing our Two-Factor Authentication (2FA) infrastructure.
In this role, you will design and implement robust, phishing-resistant authentication mechanisms that ensure the highest level of security for our clients and internal assets. You will work at the intersection of security, usability, and architecture, ensuring that our Zero Trust model is executed flawlessly.
Why Join Us?
- Competitive compensation package ($160k - $220k).
- Comprehensive health, dental, and vision coverage.
- Flexible remote work options and unlimited PTO.
- Access to cutting-edge security tools and continuous learning.
Role Overview
We are looking for a visionary engineer to take ownership of our 2FA ecosystem. You will be responsible for auditing current authentication flows, deploying advanced MFA protocols, and integrating with leading Identity Providers (IdPs) to enhance our security posture.
Responsibilities
- Design & Implement 2FA Solutions: Architect and deploy phishing-resistant Multi-Factor Authentication (MFA) and 2FA workflows using standards like FIDO2 and WebAuthn.
- Identity Provider Management: Manage and optimize configurations for Okta, Azure AD, or custom Identity Providers to ensure seamless user experiences.
- Zero Trust Architecture: Implement and enforce Zero Trust principles across the organization, including strict identity verification and least-privilege access controls.
- Security Auditing: Conduct regular security assessments and penetration testing of authentication systems to identify vulnerabilities and remediate risks.
- Incident Response: Lead the technical response to identity-related security breaches, including forensic analysis and recovery procedures.
- Collaboration: Work closely with DevOps and Software Engineering teams to integrate security best practices into the software development lifecycle (SDLC).
Qualifications
- Education: Bachelor’s degree in Computer Science, Cybersecurity, or a related field, or equivalent work experience.
- Certifications: CISSP, CISM, CEH, or Security+ preferred.
- Experience: 5+ years of experience in Information Security, specifically within IAM or Identity Management.
- Technical Skills: Deep understanding of 2FA protocols (TOTP, SMS, Push, WebAuthn), SAML, OAuth 2.0, and OIDC.
- Programming: Proficiency in scripting languages (Python, Go, or Bash) to automate security tasks.
- Tools: Hands-on experience with Okta, Azure AD B2C, CrowdStrike, or similar security platforms.
- Problem Solving: Strong analytical skills with the ability to troubleshoot complex authentication issues under pressure.