{"id":2489534,"url":"https://alion.io/job/lowes-lead-engineer-authentication-access-management","title":"Lead Engineer – Authentication & Access Management","company":{"id":1753694,"name":"Lowe's","domain":"lowes.com","url":"https://alion.io/company/lowes-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Charlotte, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":65000,"max_usd":132000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1829},"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"API Gateway","optional":false},{"name":"CI/CD","optional":false},{"name":"JavaScript","optional":false},{"name":"LDAP","optional":false},{"name":"Linux","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"Unix","optional":false},{"name":"Git","optional":true},{"name":"ITIL","optional":true},{"name":"Kong","optional":true},{"name":"Microsoft Entra ID","optional":true},{"name":"Okta","optional":true},{"name":"Ping Identity","optional":true},{"name":"PKI","optional":true}],"status":"live","first_seen_at":"2026-10-13T00:00:00Z","employer_posted_date":"2026-10-13","last_verified_at":"2026-10-20T07:59:31Z","board_verified":true,"closed_at":null,"days_open":7,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":7},"description":"Innovate in Charlotte\nThank you for dedicating your time and talent to Lowe’s. We want to give you more opportunities to learn and grow, so if you find a position you’re interested in below, we encourage you to apply!\nThe primary purpose of this role is to provide technical leadership for the design, engineering, modernization, and operational excellence of Lowe's Enterprise Access Management platform. This role is responsible for delivering secure, highly available authentication and Single Sign-On (SSO) services that support approximately 300,000 associates across more than 1,750 retail stores, 540 branch locations, 120 distribution centers, corporate offices, and hundreds of internal enterprise applications.\nAs the Lead Engineer for Enterprise Access Management, you will own the engineering lifecycle of Lowe's workforce authentication platform, ensuring it remains secure, resilient, scalable, and operationally excellent. You will partner closely with application owners, infrastructure engineering, cybersecurity, architects, and business stakeholders to design and implement secure authentication solutions while helping drive the modernization of Lowe's identity platform.\nThis role combines deep technical expertise with engineering leadership. Success requires balancing operational excellence of the current ForgeRock Access Management platform while helping shape the future of enterprise authentication through cloud-native identity services, modern authentication standards, Dynamic Client Registration, API integrations, and emerging AI-enabled identity use cases.\nKey Responsibilities\nEnterprise Platform Engineering\nLead the engineering, lifecycle management, modernization, and operational excellence of Lowe's Enterprise Access Management platform supporting workforce authentication across hundreds of enterprise applications.\nDesign, implement, and optimize secure enterprise authentication and Single Sign-On solutions for workforce access.\nDesign authentication and authorization solutions using OAuth 2.0, OpenID Connect (OIDC), SAML 2.0, LDAP, TLS/SSL, Single Sign-On, federation, multi-factor authentication (MFA), passwordless authentication, adaptive authentication, token management, and session management.\nOwn platform architecture decisions with accountability for security, scalability, resilience, availability, recoverability, and performance.\nLead platform upgrades, feature adoption, engineering improvements, and modernization initiatives.\nPlatform Stability & Operational Excellence\nDrive platform stability through proactive performance analysis, resiliency improvements, observability, capacity planning, root cause analysis, and continuous service optimization.\nLead troubleshooting, incident response, root cause analysis, and corrective actions for complex authentication, application, infrastructure, network, directory, certificate, token, session, and integration issues.\nRespond to escalated production issues and provide technical leadership during major incidents involving enterprise authentication services.\nEstablish engineering standards for monitoring, alerting, logging, operational readiness, disaster recovery, and service reliability.\nContinuously improve platform performance and operational maturity through automation and engineering best practices.\nApplication Integration & Technical Leadership\nServe as the technical advisor for application teams onboarding to the Enterprise Access Management platform.\nPartner with application owners, infrastructure teams, cybersecurity, architects, and business stakeholders to design secure authentication solutions and integration patterns.\nEngineer secure federation and trust relationships with enterprise applications using OAuth 2.0, OpenID Connect, SAML 2.0, LDAP, REST APIs, and modern identity standards.\nDesign and implement modern OAuth 2.0 capabilities including Dynamic Client Registration, machine-to-machine authentication, API gateway integrations, and secure application onboarding.\nDesign and troubleshoot integrations with enterprise identity providers, LDAP directories, and authentication services supporting workforce access management.\nModernization & Innovation\nLead technical initiatives supporting the modernization of enterprise authentication services, including migration from on-premises identity infrastructure toward cloud-native and SaaS-based identity platforms.\nEvaluate emerging authentication technologies and identity trends to improve security, reliability, and user experience.\nEvaluate and implement authentication patterns supporting emerging AI services, intelligent agents, APIs, and machine identities while maintaining enterprise security standards.\nMake recommendations to Technology and Security leadership regarding future authentication architecture and platform strategy.\nAutomation & Engineering Excellence\nDevelop and maintain automation, scripts, integrations, Infrastructure-as-Code, and CI/CD pipelines to improve platform deployment, validation, monitoring, administration, and support.\nEvaluate technical designs, configuration changes, scripts, integrations, deployment plans, and engineering standards to identify potential risks to security or platform stability.\nDesign secure deployment pipelines and engineering processes that improve operational efficiency while reducing risk.\nLeadership\nMentor engineers and provide hands-on technical leadership across the Enterprise Access Management engineering team.\nLead architecture reviews and establish engineering standards, documentation, and implementation guidance.\nEducate engineers and project teams on enterprise authentication architecture, engineering best practices, and modern identity technologies.\nSolve complex cross-functional architecture, engineering, and operational challenges while driving continuous improvement across the platform.\nRequired Qualifications\nBachelor's degree in Computer Science, Information Systems, Engineering, Cybersecurity, or related field (or equivalent experience).\n7+ years of experience in software engineering, platform engineering, infrastructure engineering, or information security.\n5+ years designing, engineering, or supporting enterprise authentication, identity, or access management platforms.\n4+ years of hands-on experience implementing authentication and authorization solutions using OAuth 2.0, OpenID Connect, SAML 2.0, LDAP, TLS/SSL, federation, Single Sign-On, token management, session management, and multi-factor authentication.\n5+ years troubleshooting complex issues spanning applications, authentication platforms, operating systems, networking, directories, certificates, APIs, and integrations.\nExperience engineering highly available, mission-critical authentication platforms supporting large enterprise environments.\nExperience improving platform reliability, resiliency, operational maturity, and production stability.\nExperience producing architecture documentation, engineering standards, operational procedures, implementation guides, and troubleshooting documentation.\nExperience developing automation using JavaScript, Shell scripting, Python, or comparable scripting languages.\nExperience administering and troubleshooting Linux or Unix operating systems.\nStrong understanding of REST APIs, authentication flows, secure integration patterns, and modern identity protocols.\nPreferred Qualifications\nMaster's degree in Computer Science, Information Systems, Business Administration, or related field.\n3+ years of experience implementing or engineering ForgeRock Access Management (version 7.x or later preferred).\nExperience with enterprise authentication platforms such as ForgeRock Access Management, Okta Workforce Identity, Ping Identity, Microsoft Entra ID, or comparable enterprise access management platforms.\nExperience integrating enterprise applications using OAuth 2.0, OpenID Connect, SAML 2.0, LDAP, REST APIs, and modern federation standards.\nExperience supporting enterprise LDAP integrations and identity repositories.\nExperience planning or executing authentication platform modernization initiatives, including migration from on-premises infrastructure to cloud-based or SaaS identity platforms.\nExperience with Dynamic Client Registration, API gateway integrations (e.g., Kong), and machine-to-machine authentication.\nExperience with CI/CD pipelines, Git-based source control, automated deployments, Infrastructure-as-Code, and configuration management.\nExperience with certificate lifecycle management, encryption, PKI, secrets management, and secure key management.\nExperience supporting containerized or cloud-native authentication platforms.\nExperience with performance testing, capacity planning, platform upgrades, vulnerability remediation, and operational readiness.\nExperience working within an ITIL-based operational environment.\nWhat You'll Work On\nSecure authentication for approximately 300,000 Lowe's associates.\nAuthentication services supporting hundreds of enterprise applications across stores, distribution centers, supply chain, and corporate systems.\nA mission-critical ForgeRock Access Management platform that requires continuous engineering improvements in reliability, scalability, and operational excellence.\nEnterprise modernization initiatives evaluating cloud-native and SaaS identity platforms.\nModern authentication capabilities including OAuth 2.0, OpenID Connect, Dynamic Client Registration, API integrations, and emerging AI identity use cases.\nCross-functional collaboration with application engineering teams across one of the world's largest retailers.\nAbout Lowe’s\nLowe’s Companies, Inc. (NYSE: LOW) is a FORTUNE® 100 home improvement company with total fiscal year 2025 sales of more than $86 billion. Lowe’s employs approximately 300,000 associates and operates over 1,750 home improvement stores, 540 branches and 120 distribution centers. Lowe’s is a core value S&P 500 equity stock and a dividend aristocrat. Based in Mooresville, N.C., Lowe’s supports the communities it serves through programs focused on creating safe, affordable housing, improving community spaces, helping to develop the next generation of skilled trade experts and providing disaster relief to communities in need. For more information, visit Lowes.com.\nLowe’s is an equal opportunity employer and administers all personnel practices without regard to race, color, religious creed, sex, gender, age, ancestry, national origin, mental or physical disability or medical condition, sexual orientation, gender identity or expression, marital status, military or veteran status, genetic information, or any other category protected under federal, state, or local law.","description_format":"text","description_chars":10698,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Retail & Shop Systems","Information Security","Tools & DIY Supplies","Kitchens, Bathrooms & Home Improvement"],"lifecycle":[{"event":"open","at":"2026-10-14T01:44:21Z"}],"visa":[],"liveness":{"score":38,"band":"fade","label":"Fading","p_open":1,"p_active":0.697,"p_room":0.55,"age_days":7,"expected_fill_days":5,"reasons":["conf:0","velocity","win:tail","comp:brand"],"computed_at":"2026-10-20T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/lowes-lead-engineer-authentication-access-management","json_url":"https://alion.io/job/lowes-lead-engineer-authentication-access-management.json","meta":{"generated_at":"2026-10-20T11:28:22Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12609,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-21T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1753694},"rest":"https://alion.io/mcp/rest/get_company?id=1753694"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Flowes-lead-engineer-authentication-access-management"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Flowes-lead-engineer-authentication-access-management"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Flowes-lead-engineer-authentication-access-management"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/lowes-lead-engineer-authentication-access-management\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Flowes-lead-engineer-authentication-access-management"}]}