Lowe's

Lead Security Engineer, CIAM (Customer Identity Access Management)

Lowe's
Apply
1 day ago
Charlotte, NC, USAStaff+

Responsibilities

  • Lead the design, implementation, operation, and modernization of the enterprise CIAM platform supporting millions of customer identities.
  • Provide technical expertise in customer identity architecture, authentication, federation, identity lifecycle management, and customer profile services.
  • Design secure identity solutions using OAuth 2.0, OpenID Connect, SAML, SCIM, REST APIs, and modern authentication standards.
  • Lead architecture for registration, login, MFA, account recovery, progressive profiling, and identity orchestration.
  • Design highly available, scalable, and resilient identity services for enterprise digital applications.
  • Troubleshoot authentication, federation, identity synchronization, directory services, and customer identity integrations.
  • Establish engineering standards, development practices, operational procedures, and technical documentation.
  • Mentor engineers through architecture reviews, design sessions, code reviews, and technical coaching.
  • Provide technical leadership during production incidents, platform upgrades, vendor engagements, and root cause analysis.
  • Evaluate CIAM technologies and drive improvements in scalability, performance, observability, automation, and operational excellence.

Requirements

  • Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Engineering, or a related field, or equivalent experience.
  • At least 7 years of software engineering, IAM, or related experience.
  • At least 5 years designing, implementing, and supporting enterprise CIAM solutions.
  • Experience with an enterprise CIAM platform such as ForgeRock, Ping Identity, Auth0, Okta Customer Identity, Transmit Security, or Microsoft Entra External ID.
  • Strong knowledge of OAuth 2.0, OpenID Connect, SAML, SCIM, JWT, MFA, WebAuthn/FIDO2, and modern authentication protocols.
  • Experience with LDAP directories, identity synchronization, customer profile management, and identity lifecycle services.
  • Experience developing or integrating APIs and microservices.
  • Experience with Java, JavaScript, Groovy, or similar programming languages.
  • Experience administering or developing on the ForgeRock Identity Platform, Ping Identity products, or Auth0 is preferred.
  • Experience with Kubernetes, containers, cloud platforms such as Azure or AWS, and highly available distributed systems is preferred.
  • Experience with identity modernization, platform migration, enterprise-scale customer identity, mentoring, and cross-functional technical leadership is preferred.
  • Preferred certifications include ForgeRock Certified Professional, Ping Identity Certified Professional, Okta Certified Professional, Transmit Security Product Certification, Google Professional Cloud Security Engineer, Google Professional Cloud Architect, CISSP, or CRISC.

Tech Stack

Categories

Lowe's

About Lowe's

10,000+ employees

Lowe's is a U.S. home improvement retailer selling building materials, appliances, tools, and installation services to homeowners, renters, and professional contractors through stores and e-commerce. Founded in 1921 and headquartered in Mooresville, North Carolina, it trades on the NYSE as LOW and operates more than 2,200 stores, serving roughly 20 million customers each week.

Contact me