Netwrix Privilege Secure (NPS) supports the integration of various MFA providers through the RADIUS connector. You would need to refer to the Yubikey documentation on setting Yubikey to work with RADIUS but in Netwrix Privilege Secure the steps in the following KB article will apply once you have a RADIUS server stood up: Configuring a Custom RADIUS Authentication Connector
Thanks!