Working Student IT Security Phishing-Resistant MFA & FIDO2 Security Keys

The Südzucker Group is an international company at home in over 30 countries. We aim to contribute as a leading integrated corporate group with plant-based solutions for nutrition, energy, and beyond to a livable, healthy, and sustainable world. Around 18,200 employees work in our five segments for this. We are further developing our existing authentication methods and planning the gradual expansion of phishing-resistant multi-factor authentication (PR-MFA) within the corporate group. The project offers you the opportunity to not only consider modern authentication technologies theoretically, but to test them practically within a real enterprise IT environment and participate in developing a later scalable operating model.

• Conduct practical compatibility and usability tests with the selected FIDO2 security keys
• Test with various end devices and operating systems, e.g., Windows 10/11, iOS/iPhone, Android smartphones, tablets, rugged devices and special company devices, virtual desktop/shared device scenarios
• Investigate different interfaces, especially USB-C and NFC
• Test registration and authentication with FIDO2 in a Microsoft Entra ID/Microsoft 365 environment
• Consider other phishing-resistant authentication methods such as Windows Hello for Business and passkeys
• Test the complete enrollment and recovery process including Microsoft Temporary Access Pass (TAP)
• Develop and practically validate necessary operating processes (for ordering and issuing, registration and initial enrollment, device replacement, loss or defect, replacement of a security key, recovery and support)
• Document technical limitations and possible exceptions
• Derive a recommendation and deployment concept for a uniform FIDO2 standard across the corporate group

• Studies in applied computer science, business informatics, IT security, or a comparable degree program
• Interest in cyber security and identity & access management, Microsoft Entra ID and Microsoft 365, multi-factor authentication, FIDO2, passkeys, and security keys
• Knowledge of Windows, iOS, and Android
• Experience with practical technical tests and troubleshooting an advantage
• Structured work including understandable documentation