Lead Engineer CIAM (Customer Identity Acess Management), Information Security

Lowe's Companies, Inc.•Charlotte, NC

About The Position

The Lead Customer Identity and Access Management (CIAM) Engineer is the technical leader responsible for designing, implementing, operating, and modernizing Lowe’s enterprise customer identity platform. The role provides technical direction for secure, scalable identity services supporting millions of customer accounts across digital experiences. The engineer partners with digital, product, engineering, architecture, and cybersecurity teams to deliver authentication, authorization, identity lifecycle, and customer profile management capabilities while advancing platform reliability, operational excellence, and future CIAM strategy.

Requirements

Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Engineering, or a related field, or equivalent experience.
7+ years of software engineering, Identity and Access Management, or related experience.
5+ years designing, implementing, and supporting enterprise CIAM solutions.
Experience with one or more enterprise CIAM platforms, such as ForgeRock, Ping Identity, Auth0, Okta Customer Identity, Transmit Security, or Microsoft Entra External ID.
Strong understanding of OAuth 2.0, OpenID Connect (OIDC), SAML, SCIM, JWT, MFA, WebAuthn/FIDO2, and modern authentication protocols.
Experience with LDAP directories, identity synchronization, customer profile management, and identity lifecycle services.
Experience developing or integrating REST APIs and microservices.
Experience with Java, JavaScript, Groovy, or similar programming languages.
Strong troubleshooting and problem-solving skills across distributed identity systems.

Nice To Haves

Experience administering and developing on the ForgeRock Identity Platform (AM, IDM, DS).
Experience with Ping Identity products or Auth0.
Experience supporting customer identity platforms at enterprise scale.
Experience with Kubernetes, containers, CI/CD pipelines, and Azure or AWS cloud platforms.
Experience designing highly available, resilient distributed systems.
Experience with identity modernization and platform migration initiatives.
Experience mentoring engineers and leading technical initiatives across cross-functional teams.
ForgeRock Certified Professional certification.
Ping Identity Certified Professional certification.
Okta Certified Professional certification.
Transmit Security Product Certification.
Google Professional Cloud Security Engineer certification.
Google Professional Cloud Architect certification.
CISSP certification.
CRISC certification.

Responsibilities

Lead the design, implementation, and operation of Lowe’s enterprise CIAM platform supporting millions of customer identities.
Provide technical expertise in customer identity architecture, authentication, federation, identity lifecycle management, and customer profile services.
Design and implement secure identity solutions using OAuth 2.0, OpenID Connect (OIDC), SAML, SCIM, REST APIs, and modern authentication standards.
Lead architecture and design discussions for customer registration, login, MFA, account recovery, progressive profiling, and identity orchestration.
Drive CIAM modernization initiatives, evaluating emerging identity technologies and cloud-native platforms.
Design highly available, scalable, and resilient identity services for enterprise digital applications.
Partner with Digital Product, Engineering, Enterprise Architecture, Infrastructure, and Cybersecurity teams to deliver secure customer identity capabilities.
Lead complex troubleshooting of authentication, federation, identity synchronization, directory services, and customer identity integrations.
Establish engineering standards, development best practices, operational procedures, and technical documentation for CIAM services.
Mentor engineers through architecture reviews, design sessions, code reviews, and technical coaching.
Provide technical leadership during production incidents, platform upgrades, vendor engagements, and root cause analysis.
Improve platform scalability, performance, observability, automation, and operational excellence.
Evaluate CIAM technologies and recommend solutions aligned with Lowe’s long-term customer identity strategy.