"Duo MFA Desktop Implementation Consultant"

Overview

Remote
Depends on Experience
Contract - Independent
Contract - 6 Month(s)
No Travel Required

Skills

Authentication
Computer Hardware
Endpoint Protection
Microsoft Azure
RADIUS
Smartphones
Multi-factor Authentication
Microsoft Windows
GPO
Microsoft SCCM

Job Details

USA REMOTE ONLY

CLIENT DOES NOT SPONSOR- S

NO 3RD PARTIES AT ALL-

Job Title: Duo MFA Desktop Implementation Consultant

Job Description:

We are seeking a seasoned consultant to lead the deployment of Duo Multi-Factor Authentication (MFA) across Windows desktop environments. This role involves hands-on implementation, policy design, hardware token management, and integration with Azure AD. The ideal candidate will have experience with enterprise-scale MFA rollouts and a strong understanding of endpoint security.

Responsibilities:

Duo Desktop MFA Enablement

  • Deploy Duo Authentication for Windows Logon (WinLogon) to 200+ desktops.

  • Integrate with Azure AD and the existing Duo tenant for a unified user experience.

  • Use GPO, Intune, or SCCM for automated deployment.

Offline Access Configuration

  • Enable Duo Offline Access codes for selected user groups.

  • Define access policies balancing security and availability.

Hardware Token Enrollment

  • Procure and configure OATH HOTP tokens for non-smartphone users.

  • Import and assign tokens via the Duo Admin Panel.

Policy & Exception Handling

  • Design policies for:

    • Desktop login enforcement

    • Service account / break-glass access

    • Offline code and token exceptions

Consulting & Support

  • Align desktop MFA with existing Azure MFA/RADIUS architecture.

  • Lead pilot rollout (10 20 desktops), including token users.

  • Support full deployment to 200+ endpoints.

  • Train IT staff on token management, policy tuning, and troubleshooting.

Required Skills:

  • Strong experience with Duo Security (WinLogon, Admin Panel, Offline Access)

  • Azure AD integration and policy design

  • Endpoint management via GPO, Intune, SCCM

  • MFA architecture and implementation

  • Excellent communication and documentation skills

Preferred Qualifications:

  • Experience with RADIUS and Azure MFA hybrid environments

  • Prior consulting experience in enterprise security projects

  • Familiarity with OATH token provisioning

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.