AWS WorkSpace 2FA Implementation

We are looking for an experienced engineer to enable Two-Factor Authentication (2FA) for our AWS WorkSpaces environment using Google Authenticator and we prefer FreeRADIUS. Project Requirements Implement 2FA for AWS WorkSpaces (AlwaysOn or AutoStop modes) Integrate Google Authenticator (TOTP) as the second factor Set up and configure FreeRADIUS as the authentication backend Ensure the solution works fully within our private subnets (no public access) Provide a clean, documented solution that is secure and production-ready Assist with troubleshooting and final validation/testing Environment AWS WorkSpaces running inside private subnets No direct internet inbound access FreeRADIUS server (existing or new setup) Deliverables Fully functional 2FA login for AWS WorkSpaces using Google Authenticator Documentation of configuration steps Optional: Best-practice hardening recommendations for RADIUS Optional: Testing procedure and rollback plan Skills Required FreeRADIUS configuration and troubleshooting TOTP / Google Authenticator integration AWS WorkSpaces authentication flow Networking and private subnet access design Linux system administration Ideal Candidate Has done RADIUS + TOTP integrations before Understands AWS networking and VPC design Can deliver a tested, stable, and maintainable setup If you have experience implementing secure 2FA for AWS services and are confident working with FreeRADIUS, we’d like to hear from you. Urgency This is a time-sensitive and priority task. We are looking for someone who can begin immediately and deliver the solution quickly and professionally. If you have completed similar 2FA integrations before, please apply and include your relevant experience.