The primary purpose of this role is to provide consultation and technical direction to engineers focused on supporting the design, implementation and ongoing operation of information security tools and services. This includes providing expert direction for effectively translating business requirements and functional specifications into robust enterprise security software solutions that ensure information assets are adequately protected with acceptable levels of control. This also includes facilitating successful monitoring, testing, and evaluation of security assessments of systems and leading the design and implementation of remediation solutions. Key Responsibilities • Drives the strategic design, development, and optimization of advanced cybersecurity platforms, harnessing expert-level scripting methodologies and custom code development to uphold the highest standards of security infrastructure and resilience • Serves as a technical expert for project teams throughout the implementation and maintenance of assigned information security solutions; defines and oversees the documentation of detailed standards (e.g., guidelines, processes, procedures) • Educates others on current architectural standards and guidelines to drive efficiency in the design and implementation of information security solutions • Drive troubleshooting, incident response, root-cause analysis, and corrective actions for complex authentication, application, infrastructure, network, directory, certificate, token, session, and integration issues • Leads the technical evaluation of new security technologies that address both current and future needs based on emerging threats and industry trends • Lead the design, engineering, optimization, and lifecycle management of enterprise authentication and identity security platforms, with accountability for security, scalability, availability, resilience, and operational readiness • Design secure authentication and authorization solutions using OAuth 2.0, OpenID Connect, SAML 2.0, LDAP, TLS/SSL, Single Sign-On, federation, multi-factor authentication, passwordless authentication, and risk-based authentication • Solves complex cross-functional architecture/design and business problems; solutions are extensible; works to simplify, optimize, remove bottlenecks, etc. • Mentor engineers, provide hands-on technical guidance, and improve the overall engineering capability of the Lowe's Information Security team • Makes recommendations to Business and Technology leadership to ensure alignment of infrastructure applications and data with current and future security standards • Responds to escalated security issues for enterprise systems; facilitates advanced diagnosis and troubleshooting when necessary • Leads break/fix activities, escalating problems to senior management and/or vendors as appropriate • Develop and maintain automation, scripts, integrations, and CI/CD pipelines to improve platform deployment, validation, monitoring, administration, and support • Evaluates technical designs, configuration changes, scripts, integrations, deployment plans to identify potential threats to security or stability of enterprise systems • Evaluates complex application and hosting environments to identify potential weaknesses and provide remediation plans to reduce risk • Designs application pipelines with secure configuration parameters to remove or reduce known threat vectors Required Qualifications • Bachelor's degree Computer Science, CIS, Engineering, Cybersecurity, or related field or equivalent years of experience in lieu of education requirement, if applicable • 7 years Experience in technology system support, software development or a related field • 5 years Experience designing, engineering, or supporting complex information security, identity, or infrastructure systems • 4 years Experience designing and supporting authentication and authorization solutions using OAuth 2.0, OpenID Connect, SAML 2.0, LDAP, TLS/SSL, Single Sign-On, federation, token management, session management, and multi-factor authentication • 4 years Experience supporting highly available, business-critical authentication or identity platforms • 4 years Experience producing clear, accurate, and maintainable technical documentation, including architecture diagrams, engineering standards, operational procedures, troubleshooting guides, and implementation plans • 5 years Experience troubleshooting complex issues across application, identity platform, operating system, network, directory, and integration layers • 4 years Experience developing automation or platform enhancements using Shell scripting, JavaScript, or comparable scripting languages • 4 years Experience administering or troubleshooting Linux or Unix operating systems, including services, compute resources, storage, file systems, certificates, and network connectivity Preferred Qualifications • Master's degree Computer Science, CIS, Business Administration or related field • 6 years Experience working on project(s) involving the implementation of solutions applying development life cycles (SDLC) • 3 years Experience leading teams, with or without direct reports • 3 years Hands-on experience implementing, engineering, or supporting ForgeRock Access Management, preferably version 7.x or later • 3 years Experience with ForgeRock Directory Services, ForgeRock Identity Gateway, or comparable identity platform components • 3 years Experience with Radiant Logic, Active Directory, ForgeRock Directory Services, or other LDAP-based identity repositories • 3 years Experience designing or supporting identity platforms across multiple geographic regions • 3 years Experience with CI/CD pipelines, automated deployments, Git-based source control, code reviews, and configuration promotion • 3 years Experience with certificate lifecycle management, encryption, key management, and secrets-management technologies • 2 years Experience building or supporting identity solutions using public cloud or containerized infrastructure platforms • 3 years Experience with performance testing, capacity planning, platform upgrades, patching, and vulnerability remediation • 4 years Experience working with an IT Infrastructure Library (ITIL) framework