Lowe's

Lead Security Engineer, IAM (Workforce Authentication)

Lowe's
Apply
4 days ago
Charlotte, NC, USAStaff+

Responsibilities

  • Lead the engineering, lifecycle management, modernization, and operational excellence of the Enterprise Access Management platform.
  • Design, implement, and optimize secure workforce authentication, authorization, and Single Sign-On solutions.
  • Own platform architecture decisions covering security, scalability, resilience, availability, recoverability, and performance.
  • Lead troubleshooting, incident response, root cause analysis, corrective actions, and major-incident response for complex authentication and integration issues.
  • Advise application teams and engineer secure federation, trust relationships, OAuth integrations, API integrations, and application onboarding patterns.
  • Lead migration and modernization initiatives from on-premises identity infrastructure toward cloud-native and SaaS identity platforms.
  • Develop and maintain automation, scripts, integrations, Infrastructure-as-Code, and CI/CD pipelines for deployment, monitoring, administration, and support.
  • Mentor engineers, lead architecture reviews, establish engineering standards, and provide technical leadership across the access management team.

Requirements

  • Bachelor’s degree in Computer Science, Information Systems, Engineering, Cybersecurity, or a related field, or equivalent experience.
  • At least 7 years of experience in software engineering, platform engineering, infrastructure engineering, or information security.
  • At least 5 years designing, engineering, or supporting enterprise authentication, identity, or access management platforms.
  • At least 4 years implementing authentication and authorization solutions using OAuth 2.0, OpenID Connect, SAML 2.0, LDAP, TLS/SSL, federation, SSO, token management, session management, and MFA.
  • At least 5 years troubleshooting complex issues spanning applications, authentication platforms, operating systems, networking, directories, certificates, APIs, and integrations.
  • Experience engineering highly available, mission-critical authentication platforms and improving reliability, resiliency, operational maturity, and production stability.
  • Experience producing architecture documentation, engineering standards, operational procedures, implementation guides, and troubleshooting documentation.
  • Experience developing automation with JavaScript, Shell scripting, Python, or comparable scripting languages.
  • Experience administering and troubleshooting Linux or Unix operating systems, along with REST APIs, authentication flows, secure integration patterns, and modern identity protocols.
  • Preferred qualifications include a master’s degree; ForgeRock Access Management experience; experience with Okta Workforce Identity, Ping Identity, or Microsoft Entra ID; cloud or SaaS identity modernization; Dynamic Client Registration; Kong or other API gateways; CI/CD, Git, Infrastructure-as-Code, configuration management, PKI, secrets management, secure key management, containerized platforms, performance testing, vulnerability remediation, and ITIL environments.
Lowe's

About Lowe's

10,000+ employees

Lowe's is a U.S. home improvement retailer selling building materials, appliances, tools, and installation services to homeowners, renters, and professional contractors through stores and e-commerce. Founded in 1921 and headquartered in Mooresville, North Carolina, it trades on the NYSE as LOW and operates more than 2,200 stores, serving roughly 20 million customers each week.

Contact me