Lowe’s Jobs

Lead Engineer - Enterprise Workforce Access Management, Information Security

Lowe’s

Lead Engineer - Enterprise Workforce Access Management, Information Security

Reposted 12 Days Ago

Be an Early Applicant

Charlotte, NC, USA

Hybrid

Senior level

Consumer Web • eCommerce • Information Technology • Retail • Software • Analytics • App development

Curiosity wanted. Innovation required.

The Role

Lead technical design, implementation, and lifecycle management of enterprise identity and authentication platforms. Provide expert consultation, troubleshoot escalated security incidents, develop automation and CI/CD integrations, evaluate new security technologies, and mentor engineers while ensuring secure authentication, authorization, and remediation solutions across systems.

Summary Generated by Built In

Innovate in Charlotte
Thank you for dedicating your time and talent to Lowe's. We want to give you more opportunities to learn and grow, so if you find a position you're interested in below, we encourage you to apply!
Key Responsibilities
Enterprise Platform Engineering

Lead the engineering, lifecycle management, modernization, and operational excellence of Lowe's Enterprise Access Management platform supporting workforce authentication across hundreds of enterprise applications.
Design, implement, and optimize secure enterprise authentication and Single Sign-On solutions for workforce access.
Design authentication and authorization solutions using OAuth 2.0, OpenID Connect (OIDC), SAML 2.0, LDAP, TLS/SSL, Single Sign-On, federation, multi-factor authentication (MFA), passwordless authentication, adaptive authentication, token management, and session management.
Own platform architecture decisions with accountability for security, scalability, resilience, availability, recoverability, and performance.
Lead platform upgrades, feature adoption, engineering improvements, and modernization initiatives.

Platform Stability & Operational Excellence

Drive platform stability through proactive performance analysis, resiliency improvements, observability, capacity planning, root cause analysis, and continuous service optimization.
Lead troubleshooting, incident response, root cause analysis, and corrective actions for complex authentication, application, infrastructure, network, directory, certificate, token, session, and integration issues.
Respond to escalated production issues and provide technical leadership during major incidents involving enterprise authentication services.
Establish engineering standards for monitoring, alerting, logging, operational readiness, disaster recovery, and service reliability.
Continuously improve platform performance and operational maturity through automation and engineering best practices.

Application Integration & Technical Leadership

Serve as the technical advisor for application teams onboarding to the Enterprise Access Management platform.
Partner with application owners, infrastructure teams, cybersecurity, architects, and business stakeholders to design secure authentication solutions and integration patterns.
Engineer secure federation and trust relationships with enterprise applications using OAuth 2.0, OpenID Connect, SAML 2.0, LDAP, REST APIs, and modern identity standards.
Design and implement modern OAuth 2.0 capabilities including Dynamic Client Registration, machine-to-machine authentication, API gateway integrations, and secure application onboarding.
Design and troubleshoot integrations with enterprise identity providers, LDAP directories, and authentication services supporting workforce access management.

Modernization & Innovation

Lead technical initiatives supporting the modernization of enterprise authentication services, including migration from on-premises identity infrastructure toward cloud-native and SaaS-based identity platforms.
Evaluate emerging authentication technologies and identity trends to improve security, reliability, and user experience.
Evaluate and implement authentication patterns supporting emerging AI services, intelligent agents, APIs, and machine identities while maintaining enterprise security standards.
Make recommendations to Technology and Security leadership regarding future authentication architecture and platform strategy.

Automation & Engineering Excellence

Develop and maintain automation, scripts, integrations, Infrastructure-as-Code, and CI/CD pipelines to improve platform deployment, validation, monitoring, administration, and support.
Evaluate technical designs, configuration changes, scripts, integrations, deployment plans, and engineering standards to identify potential risks to security or platform stability.
Design secure deployment pipelines and engineering processes that improve operational efficiency while reducing risk.

Leadership

Mentor engineers and provide hands-on technical leadership across the Enterprise Access Management engineering team.
Lead architecture reviews and establish engineering standards, documentation, and implementation guidance.
Educate engineers and project teams on enterprise authentication architecture, engineering best practices, and modern identity technologies.
Solve complex cross-functional architecture, engineering, and operational challenges while driving continuous improvement across the platform.

Required Qualifications

Bachelor's degree in Computer Science, Information Systems, Engineering, Cybersecurity, or related field (or equivalent experience).
7+ years of experience in software engineering, platform engineering, infrastructure engineering, or information security.
5+ years designing, engineering, or supporting enterprise authentication, identity, or access management platforms.
4+ years of hands-on experience implementing authentication and authorization solutions using OAuth 2.0, OpenID Connect, SAML 2.0, LDAP, TLS/SSL, federation, Single Sign-On, token management, session management, and multi-factor authentication.
5+ years troubleshooting complex issues spanning applications, authentication platforms, operating systems, networking, directories, certificates, APIs, and integrations.
Experience engineering highly available, mission-critical authentication platforms supporting large enterprise environments.
Experience improving platform reliability, resiliency, operational maturity, and production stability.
Experience producing architecture documentation, engineering standards, operational procedures, implementation guides, and troubleshooting documentation.
Experience developing automation using JavaScript, Shell scripting, Python, or comparable scripting languages.
Experience administering and troubleshooting Linux or Unix operating systems.
Strong understanding of REST APIs, authentication flows, secure integration patterns, and modern identity protocols.

Preferred Qualifications

Master's degree in Computer Science, Information Systems, Business Administration, or related field.
3+ years of experience implementing or engineering ForgeRock Access Management (version 7.x or later preferred).
Experience with enterprise authentication platforms such as ForgeRock Access Management, Okta Workforce Identity, Ping Identity, Microsoft Entra ID, or comparable enterprise access management platforms.
Experience integrating enterprise applications using OAuth 2.0, OpenID Connect, SAML 2.0, LDAP, REST APIs, and modern federation standards.
Experience supporting enterprise LDAP integrations and identity repositories.
Experience planning or executing authentication platform modernization initiatives, including migration from on-premises infrastructure to cloud-based or SaaS identity platforms.
Experience with Dynamic Client Registration, API gateway integrations (e.g., Kong), and machine-to-machine authentication.
Experience with CI/CD pipelines, Git-based source control, automated deployments, Infrastructure-as-Code, and configuration management.
Experience with certificate lifecycle management, encryption, PKI, secrets management, and secure key management.
Experience supporting containerized or cloud-native authentication platforms.
Experience with performance testing, capacity planning, platform upgrades, vulnerability remediation, and operational readiness.
Experience working within an ITIL-based operational environment.

What You'll Work On

Secure authentication for approximately 300,000 Lowe's associates.
Authentication services supporting hundreds of enterprise applications across stores, distribution centers, supply chain, and corporate systems.
A mission-critical ForgeRock Access Management platform that requires continuous engineering improvements in reliability, scalability, and operational excellence.
Enterprise modernization initiatives evaluating cloud-native and SaaS identity platforms.
Modern authentication capabilities including OAuth 2.0, OpenID Connect, Dynamic Client Registration, API integrations, and emerging AI identity use cases.
Cross-functional collaboration with application engineering teams across one of the world's largest retailers.

About Lowe's
Lowe's Companies, Inc. (NYSE: LOW) is a FORTUNE® 100 home improvement company with total fiscal 2025 sales of more than $86 billion. Lowe's employs approximately 300,000 associates and operates over 1,750 home improvement stores, 540 branches and 120 distribution centers. Based in Mooresville, N.C., Lowe's supports the communities it serves through programs focused on creating safe, affordable housing, improving community spaces, helping to develop the next generation of skilled trade experts and providing disaster relief to communities in need. For more information, visit Lowes.com .
Lowe's is an equal opportunity employer and administers all personnel practices without regard to race, color, religious creed, sex, gender, age, ancestry, national origin, mental or physical disability or medical condition, sexual orientation, gender identity or expression, marital status, military or veteran status, genetic information, or any other category protected under federal, state, or local law.

Skills Required

Bachelor's degree in Computer Science, CIS, Engineering, Cybersecurity, or related field (or equivalent experience)
7 years experience in technology system support, software development, or related field
5 years experience designing, engineering, or supporting complex information security, identity, or infrastructure systems
4 years experience designing and supporting authentication and authorization solutions using OAuth 2.0, OpenID Connect, SAML 2.0, LDAP, TLS/SSL, Single Sign-On, federation, token management, session management, and multi-factor authentication
4 years experience supporting highly available, business-critical authentication or identity platforms
4 years experience producing technical documentation, including architecture diagrams, operational procedures, and implementation plans
5 years experience troubleshooting complex issues across application, identity platform, OS, network, directory, and integration layers
4 years experience developing automation or platform enhancements using Shell scripting, JavaScript, or comparable scripting languages
4 years experience administering or troubleshooting Linux or Unix operating systems, including services, compute resources, storage, file systems, certificates, and network connectivity
Master's degree in Computer Science, CIS, Business Administration, or related field
6 years experience on projects implementing solutions applying development life cycles (SDLC)
3 years experience leading teams, with or without direct reports
3 years hands-on experience with ForgeRock Access Management (preferably 7.x or later)
3 years experience with ForgeRock Directory Services, ForgeRock Identity Gateway, or comparable identity platform components
3 years experience with Radiant Logic, Active Directory, ForgeRock Directory Services, or other LDAP-based identity repositories
3 years experience designing or supporting identity platforms across multiple geographic regions
3 years experience with CI/CD pipelines, automated deployments, Git-based source control, code reviews, and configuration promotion
3 years experience with certificate lifecycle management, encryption, key management, and secrets-management technologies
2 years experience building or supporting identity solutions using public cloud or containerized infrastructure platforms
3 years experience with performance testing, capacity planning, platform upgrades, patching, and vulnerability remediation
4 years experience working with an IT Infrastructure Library (ITIL) framework

What the Team is Saying

Lowe’s Compensation & Benefits Highlights

Retirement Support — A 401(k) with a company match up to 4.25% when contributing 6% and an Employee Stock Purchase Plan with a 15% discount are emphasized as core strengths. These features provide meaningful avenues for long‑term savings and employee ownership.
Parental & Family Support — Eligible full‑time associates can access up to 10 weeks paid maternity leave and 4 weeks paid parental leave, with adoption assistance and fertility coverage also highlighted. This depth of family support is notable for a big‑box retailer.
Wellbeing & Lifestyle Benefits — Tuition‑free degree and certificate programs, Track to the Trades with upfront funding, and mental‑health/EAP resources broaden total rewards beyond pay. A 10% merchandise discount and a company‑matched relief fund add everyday value and hardship support.

Learn more about Lowe’s's Compensation & Benefits →

Lowe’s Insights

What's It Like to Work at Lowe’s? Lowe’s Culture & Values Lowe’s Career Growth & Development What's the Work-Life Balance Like at Lowe’s? Lowe’s Leadership & Management Lowe’s Company Growth, Stability & Outlook

View all jobs at Lowe’s

View Lowe’s Profile

Report Job

Am I A Good Fit?

beta

Get Personalized Job Insights.

Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.

The Company

HQ: Mooresville, NC

300,000 Employees

Year Founded: 1921

What We Do

It’s curious to think of innovation and stability co-existing. But we pair a 100-year track record of success with a hunger to do things differently. Everyone is in the work — tackling complex problems where your impact can build back or build up the communities we serve. We fill our halls with curious minds from all walks of life. Our differences make us stronger, which is why our leaders build cultures of recognition and inclusion. You are heard, and your curiosities are celebrated and championed here.

Why Work With Us

We have built a space where the curious can move freely. Up in title, up in skills, to the side with teams, or back to try something completely new. We help you find your path — because when you win, we all win.