Lead Security Engineer, CIAM (Customer Identity Access Management)

Innovate in Charlotte Thank you for dedicating your time and talent to Lowe’s. We want to give you more opportunities to learn and grow, so if you find a position you’re interested in below, we encourage you to apply! The Lead Customer Identity and Access Management (CIAM) Engineer serves as the technical leader responsible for the design, implementation, operation, and modernization of Lowe's enterprise customer identity platform. This role provides technical direction for secure, scalable identity services supporting millions of customer accounts across digital experiences. The engineer partners with digital, product, engineering, architecture, and cybersecurity teams to deliver authentication, authorization, identity lifecycle, and customer profile management capabilities while driving platform reliability, operational excellence, and future CIAM strategy. Key Responsibilities: • Lead the design, implementation, and operation of Lowe's enterprise Customer Identity and Access Management (CIAM) platform supporting millions of customer identities. • Serve as the technical expert for customer identity architecture, authentication, federation, identity lifecycle management, and customer profile services. • Design and implement secure identity solutions using OAuth 2.0, OpenID Connect (OIDC), SAML, SCIM, REST APIs, and modern authentication standards. • Lead architecture and design discussions for customer registration, login, MFA, account recovery, progressive profiling, and identity orchestration. • Drive modernization initiatives across the CIAM ecosystem, evaluating emerging identity technologies and cloud-native platforms. • Design highly available, scalable, and resilient identity services that support enterprise digital applications. • Partner closely with Digital Product, Engineering, Enterprise Architecture, Infrastructure, and Cybersecurity teams to deliver secure customer identity capabilities. • Lead complex troubleshooting efforts involving authentication, federation, identity synchronization, directory services, and customer identity integrations. • Establish engineering standards, development best practices, operational procedures, and technical documentation for CIAM services. • Mentor engineers through architecture reviews, design sessions, code reviews, and technical coaching. • Provide technical leadership during production incidents, platform upgrades, vendor engagements, and root cause analysis. • Drive continuous improvements in platform scalability, performance, observability, automation, and operational excellence. • Evaluate new CIAM technologies and make recommendations that align with Lowe's long-term customer identity strategy. Required Qualifications • Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, or related field (or equivalent experience) • 7+ years of software engineering, Identity & Access Management, or related experience • 5+ years designing, implementing, and supporting enterprise Customer Identity and Access Management (CIAM) solutions • Experience with one or more enterprise CIAM platforms such as ForgeRock, Ping Identity, Auth0, Okta Customer Identity, Transmit Security, or Microsoft Entra External ID • Strong understanding of OAuth 2.0, OpenID Connect (OIDC), SAML, SCIM, JWT, MFA, WebAuthn/FIDO2, and modern authentication protocols • Experience with LDAP directories, identity synchronization, customer profile management, and identity lifecycle services • Experience developing or integrating REST APIs and microservices • Experience with Java, JavaScript, Groovy, or similar programming languages • Strong troubleshooting and problem-solving skills across distributed identity systems Preferred Qualifications : • Experience administering and developing on the ForgeRock Identity Platform (AM, IDM, DS) • Experience with Ping Identity products or Auth0 • Experience supporting customer identity platforms at enterprise scale • Experience with Kubernetes, containers, CI/CD pipelines, and cloud platforms (Azure or AWS) • Experience designing highly available, resilient distributed systems • Experience with identity modernization and platform migration initiatives • Experience mentoring engineers and leading technical initiatives across cross-functional teams Preferred Certifications: ForgeRock Certified Professional Ping Identity Certified Professional Okta Certified Professional Transmit Security Product Certification Google Professional Cloud Security Engineer Google Professional Cloud Architect CISSP CRISC About Lowe’s Lowe’s Companies, Inc. (NYSE: LOW) is a FORTUNE® 100 home improvement company with total fiscal year 2025 sales of more than $86 billion. Lowe’s employs approximately 300,000 associates and operates over 1,750 home improvement stores, 540 branches and 120 distribution centers. Lowe’s is a core value S&P 500 equity stock and a dividend aristocrat. Based in Mooresville, N.C., Lowe’s supports the communities it serves through programs focused on creating safe, affordable housing, improving community spaces, helping to develop the next generation of skilled trade experts and providing disaster relief to communities in need. For more information, visit Lowes.com . Lowe’s is an equal opportunity employer and administers all personnel practices without regard to race, color, religious creed, sex, gender, age, ancestry, national origin, mental or physical disability or medical condition, sexual orientation, gender identity or expression, marital status, military or veteran status, genetic information, or any other category protected under federal, state, or local law.