2 months ago
Charlotte, NC, USAStaff+
Responsibilities
- Lead the design, implementation, operation, modernization, and strategy of the enterprise CIAM platform supporting millions of customer identities.
- Provide technical expertise in customer identity architecture, authentication, federation, identity lifecycle management, directory services, and customer profile services.
- Design secure identity solutions using OAuth 2.0, OpenID Connect, SAML, SCIM, REST APIs, and modern authentication standards.
- Lead architecture for registration, login, MFA, account recovery, progressive profiling, and identity orchestration.
- Design highly available, scalable, and resilient identity services for enterprise digital applications.
- Partner with digital product, engineering, enterprise architecture, infrastructure, and cybersecurity teams.
- Lead troubleshooting for authentication, federation, identity synchronization, directory services, and customer identity integrations.
- Establish engineering standards, development practices, operational procedures, and technical documentation.
- Mentor engineers through architecture reviews, design sessions, code reviews, and technical coaching.
- Provide technical leadership during production incidents, platform upgrades, vendor engagements, and root cause analysis.
- Drive improvements in scalability, performance, observability, automation, and operational excellence.
- Evaluate CIAM technologies and recommend solutions aligned with long-term customer identity strategy.
Requirements
- Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Engineering, or a related field, or equivalent experience.
- At least 7 years of software engineering, Identity and Access Management, or related experience.
- At least 5 years designing, implementing, and supporting enterprise CIAM solutions.
- Experience with one or more enterprise CIAM platforms, such as ForgeRock, Ping Identity, Auth0, Okta Customer Identity, Transmit Security, or Microsoft Entra External ID.
- Strong understanding of OAuth 2.0, OpenID Connect, SAML, SCIM, JWT, MFA, WebAuthn/FIDO2, and modern authentication protocols.
- Experience with LDAP directories, identity synchronization, customer profile management, and identity lifecycle services.
- Experience developing or integrating REST APIs and microservices.
- Experience with Java, JavaScript, Groovy, or similar programming languages.
- Strong troubleshooting and problem-solving skills across distributed identity systems.
- Preferred experience administering and developing on the ForgeRock Identity Platform, including AM, IDM, and DS.
- Preferred experience with Ping Identity products, Auth0, enterprise-scale customer identity platforms, Kubernetes, containers, CI/CD pipelines, Azure, or AWS.
- Preferred experience designing highly available distributed systems, leading identity modernization or migration initiatives, mentoring engineers, and leading cross-functional technical initiatives.
- Preferred certifications include ForgeRock Certified Professional, Ping Identity Certified Professional, Okta Certified Professional, Transmit Security Product Certification, Google Professional Cloud Security Engineer, Google Professional Cloud Architect, CISSP, or CRISC.
Tech Stack
Categories
About Lowe's
Lowe's is a U.S. home improvement retailer selling building materials, appliances, tools, and installation services to homeowners, renters, and professional contractors through stores and e-commerce. Founded in 1921 and headquartered in Mooresville, North Carolina, it trades on the NYSE as LOW and operates more than 2,200 stores, serving roughly 20 million customers each week.