Lead Engineer – Enterprise Workforce Access Management, Information Security

Innovate in Charlotte Thank you for dedicating your time and talent to Lowe’s.  We want to give you more opportunities to learn and grow, so if you find a position you’re interested in below, we encourage you to apply!

Enterprise Platform Engineering Lead the engineering, lifecycle management, modernization, and operational excellence of Lowe's Enterprise Access Management platform supporting workforce authentication across hundreds of enterprise applications. Design, implement, and optimize secure enterprise authentication and Single Sign-On solutions for workforce access. Design authentication and authorization solutions using OAuth 2.0, OpenID Connect (OIDC), SAML 2.0, LDAP, TLS/SSL, Single Sign-On, federation, multi-factor authentication (MFA), passwordless authentication, adaptive authentication, token management, and session management. Own platform architecture decisions with accountability for security, scalability, resilience, availability, recoverability, and performance. Lead platform upgrades, feature adoption, engineering improvements, and modernization initiatives.   Platform Stability & Operational Excellence Drive platform stability through proactive performance analysis, resiliency improvements, observability, capacity planning, root cause analysis, and continuous service optimization. Lead troubleshooting, incident response, root cause analysis, and corrective actions for complex authentication, application, infrastructure, network, directory, certificate, token, session, and integration issues. Respond to escalated production issues and provide technical leadership during major incidents involving enterprise authentication services. Establish engineering standards for monitoring, alerting, logging, operational readiness, disaster recovery, and service reliability. Continuously improve platform performance and operational maturity through automation and engineering best practices.   Application Integration & Technical Leadership Serve as the technical advisor for application teams onboarding to the Enterprise Access Management platform. Partner with application owners, infrastructure teams, cybersecurity, architects, and business stakeholders to design secure authentication solutions and integration patterns. Engineer secure federation and trust relationships with enterprise applications using OAuth 2.0, OpenID Connect, SAML 2.0, LDAP, REST APIs, and modern identity standards. Design and implement modern OAuth 2.0 capabilities including Dynamic Client Registration, machine-to-machine authentication, API gateway integrations, and secure application onboarding. Design and troubleshoot integrations with enterprise identity providers, LDAP directories, and authentication services supporting workforce access management.   Modernization & Innovation Lead technical initiatives supporting the modernization of enterprise authentication services, including migration from on-premises identity infrastructure toward cloud-native and SaaS-based identity platforms. Evaluate emerging authentication technologies and identity trends to improve security, reliability, and user experience. Evaluate and implement authentication patterns supporting emerging AI services, intelligent agents, APIs, and machine identities while maintaining enterprise security standards. Make recommendations to Technology and Security leadership regarding future authentication architecture and platform strategy.   Automation & Engineering Excellence Develop and maintain automation, scripts, integrations, Infrastructure-as-Code, and CI/CD pipelines to improve platform deployment, validation, monitoring, administration, and support. Evaluate technical designs, configuration changes, scripts, integrations, deployment plans, and engineering standards to identify potential risks to security or platform stability. Design secure deployment pipelines and engineering processes that improve operational efficiency while reducing