The GN&T Network Security team has an opening for Engineer IV’s in the Network Access team.  This role will center around delivery and operations of the Multi Factor Authentication (MFA) services. MFA is provided as a service(s) to other network teams, providing them centralized mechanisms to help implement MFA and adhere to the Network Security Fundamentals (Access Management, Situational Awareness, Configuration Hardening, Vulnerability Mitigation) at scale. 

The Network Access team is looking for an Engineer IV to focus on the delivery, operational support, and scaling of our MFA services. This position bridges the divide between core security engineering and cloud-native operations. You will oversee the daily uptime, deployment, and optimization of our authentication infrastructure hosted on Kubernetes (OpenShift). This is an essential engineering function that ensures secure and reliable access management across the GN&T landscape.

A successful candidate will possess both strong inter-personal and technical skills. They will be expected to work within and across team barriers to take these functions from concepts to design and ultimately to production implementation.

Key Responsibilities:

• Platform Administration: Manage, configure, and maintain enterprise MFA platforms (such as Duo MFA, Okta, or Ping Identity).

• Policy Enforcement: Implement and enforce adaptive, risk-based, and phishing-resistant MFA policies (including FIDO2/passkeys) across hybrid and cloud applications.

• Incident Management & Troubleshooting: Serve as a Tier 2/Tier 3 escalation point to investigate authentication failures, resolve complex access disruptions, and perform Root Cause Analysis (RCA).

• Automation & Integration: Build automated provisioning workflows and configuration management scripts (using Python, Bash, or Ansible) to streamline identity lifecycles and security patching.

• Monitoring & Auditing: Monitor system performance, track authentication telemetry via tools like Splunk, and ensure full compliance with internal security frameworks and audits.

• Platform Operations: Maintain, upgrade, and optimize our proprietary in-house MFA service and Linux Virtual Machines hosted on Red Hat OpenShift / Kubernetes.

• Infrastructure as Code: Maintain and write Helm charts, OpenShift templates, and CI/CD pipelines (Jenkins, GitLab CI, or ArgoCD) for automated service delivery.

• Bachelor’s degree or four or more years of work experience.

• Four or more years of relevant experience required, demonstrated through work experience and/or military experience.

• IAM Expertise – Deep knowledge and understanding of Identity protocols like LDAP, SAML, FIDO, OAuth, and OpenID Connect. Working experience with products like DUO, Okta.

• Automation & Scripting – Proficiency in developing automation tools using languages like python, bash, etc.

• Directory Services – Practical experience of LDAP directory server implementations.

• Linux Systems Administration: Deep knowledge of Linux operating systems, networking fundamentals (TCP/IP, DNS, Load Balancing), and container security.

• Operational Mindset: Strong background in incident tracking, log management, documentation (Confluence), and participating in on-call support rotations.

• Knowledge of Splunk. Ability to write splunk search language models, data models, and lookups for threat hunting.
   

• CI/CD Tools: Hands-on experience with declarative git-driven deployments (ArgoCD, Flux) and package management via Helm

• Strong networking and cybersecurity knowledge and experience.

• Knowledge of Jumphost servers and their operational use

• Knowledge of applications like Hashicrop vault to store credentials and secrets.

• Experience in developing Splunk SOAR to automate triage and response actions.

• Hands on experience in managing Identities in containers and cloud native services.

• Directory Services optimization to support millions of identity attributes and high frequency authentication requests.

• Expert knowledge of LDAP, SAML, OAuth 2.0, and OIDC.

• Container Orchestration. Experience managing applications on kubernetes.

• Established track record in managing complex processes, driving results, and adapting to change.

• Demonstrated success leading organizations providing cybersecurity engineering.

• The ability to communicate effectively across all levels of the organization and educate peers and teams on security concepts and overall importance to the business.

• Recent experience with machine learning, statistical analysis and artificial intelligence.

• Knowledge of network-based, system-level, and application layer attacks and mitigation methods.

• Experience building relationships across business units.

If Verizon and this role sound like a fit for you, we encourage you to apply even if you don’t meet every “even better” qualification listed above.

Our benefits are designed to help you move forward in your career, and in areas of your life outside of Verizon. From health and wellness benefit options including: medical, dental, vision, short and long term disability, basic life insurance, supplemental life insurance, AD&D insurance, identity theft protection, pet insurance and group home & auto insurance. We also offer a matched 401(k) savings plan, up to 8 company paid holidays per year and up to 6 personal days per year, paid parental leave, adoption assistance and tuition assistance, plus other incentives, we’ve got you covered with our award-winning total rewards package. Depending on the role, employees have the opportunity to receive compensation in the form of premium pay such as overtime, shift differential, holiday pay, allowances, etc. Newly hired employees receive up to 15 days of vacation per year, which grows with additional service. For part-timers, your coverage will vary as you may be eligible for some of these benefits depending on your individual circumstances.