You can use Google Authenticator, SMS, etc. Hardening WP is really involved. You need to do it with plugins + changes to htaccess. And if you have a NetScaler in front even more stuff you can do to help. I haven't written a guide on it because don't want to tell the bad guys all the secrets.