Engineer, Information Security_PingAm(ForgeRock)_PingDS(ForgeRock)

Lowe's Companies, Inc.; Bengaluru; On-site; INR 1,200,000 - 2,200,000; Full time

Benefits offered by this job

On-site gym

On-site clinic

Modern office environment

Job summary

Lowe’s India in Bengaluru is seeking an experienced IAM Engineer to design, implement, and maintain authentication and authorization solutions, with ForgeRock and LDAP expertise. The role spans on‑prem and cloud environments, requiring Java development and strong security knowledge.

Collaborate with cross‑functional teams, monitor security systems, and stay updated on IAM best practices. This on‑site role offers an ultramodern workspace with on‑site facilities in Bengaluru.

Qualifications

• Bachelor’s degree in computer science, Cybersecurity, Engineering, or a related field (or equivalent work experience).
• At least 3 years of experience in technology system support, software development, or a related field, with at least 2 years of experience in information security applications and systems, specifically IAM.
• Strong working knowledge of Identity and Access Management concepts, including authentication and authorization mechanisms.
• Hands-on experience with IAM product ForgeRock. Ability to configure, troubleshoot, and manage these systems in enterprise environments.
• Solid understanding of LDAP, including its role in directory services and user authentication management.
• Knowledge of authentication protocols like OAuth 2.0, OpenID Connect (OIDC), and SAML 2.0, and the ability to implement these protocols in IAM environments.
• Experience with API security and integration using JSON, REST, and web services.
• Java development experience for customizations and enhancements of IAM systems, including writing secure, maintainable code to support authentication and authorization workflows.
• Knowledge of IAM solutions in Cloud environments (AWS, Azure, or GCP) and how IAM integrates within those platforms.
• Excellent written and verbal communication skills, with the ability to document technical processes and contribute to knowledge sharing.

Responsibilities

• Design, implement, and maintain information security tools and services in the IAM domain, with a primary focus on authentication and authorization solutions.
• Support and manage enterprise-level IAM systems and services such as ForgeRock and other Identity Providers (IdPs).
• Ensure the adoption and implementation of authentication standards (OAuth 2.0, OpenID Connect, SAML 2.0).
• Apply a solid understanding of LDAP concepts, integration with enterprise directories, and their role in IAM systems.
• Collaborate with the engineering and security teams to design, deploy, and operate secure authentication solutions across on‑prem and cloud environments.
• Assist the Information Security team with monitoring security systems, analyzing logs, identifying vulnerabilities, and addressing security incidents related to IAM.
• Partner with other teams to design and implement secure solutions for various enterprise applications and infrastructure components.
• Assist in integrating IAM solutions with cloud technologies and platforms (AWS, Azure, GCP).
• Stay up to date with IAM security best practices and participate in continuing education related to identity access management.
• Contribute to secure coding initiatives and documentation, ensuring compliance with IAM standards.
• Analyze outputs from cybersecurity tools to identify threats and develop mitigation strategies for IAM.
• Assist in incident management and remediation of IAM security issues.
• Develop custom enhancements using Java and contribute to technical documentation in a software development environment.
• Collaborate with vendors and product teams for troubleshooting and enhancement of IAM products and services.

Skills

IAM concepts

ForgeRock

OIDC

OAuth 2.0

SAML 2.0

LDAP

Java development

Cloud IAM

REST APIs

Security best practices

Education

Bachelor's degree

Master's degree

Tools

ForgeRock

LDAP tooling

JSON/REST tooling

Job description

Innovate in Bengaluru

This position is based at our on-site office in Bengaluru. Lowe’s offers an ultramodern work environment, complete with cutting-edge technology, collaborative workspaces, an on-site gym and clinic, and other perks to enhance your work experience.

About Lowe’s

Lowe’s Companies, Inc. (NYSE: LOW) is a FORTUNE 100 home improvement company serving approximately 16 million customer transactions a week, with total fiscal year 2024 sales of more than $83 billion. Lowe’s employs approximately 300,000 associates and operates over 1,700 home improvement stores, 530 branches and 130 distribution centers. Based in Mooresville, N.C., Lowe’s supports the communities it serves through programs focused on creating safe, affordable housing, improving community spaces, helping to develop the next generation of skilled trade experts and providing disaster relief to communities in need. For more information, visit Lowes.com.

At Lowe’s India, we are the enablers who help create an engaging customer experience for our $90+ billion home improvement business at Lowe’s. Our 4000+ associates work across technology, analytics, business operations, finance & accounting, product management, and shared services. We leverage new technologies and find innovative methods to ensure that Lowe’s has a competitive edge in the market. To know more about Lowe’s India, visit Lowes.co.in

Job Summary

We are seeking an experienced Identity and Access Management (IAM) Engineer with a strong focus on authentication and authorization to join our team. This role will be responsible for the design, implementation, and ongoing maintenance of IAM solutions, particularly in the areas of authentication protocols (OAuth 2.0, OpenID Connect, SAML 2.0), integration with Identity Provider

ForgeRock, and supporting LDAP-based directory services. The ideal candidate will have hands‑on experience with Java development to support customizations and enhancements of IAM systems, a deep understanding of IAM best practices, and a proactive approach to ensuring the security and scalability of our access management systems. This role offers the opportunity to work closely with cross‑functional teams to deliver secure and efficient IAM solutions across on‑prem and cloud environments.

Key Responsibilities

Core Role: Design, implement, and maintain information security tools and services in the Identity and Access Management (IAM) domain, with a primary focus on authentication and authorization solutions.

IAM Products

Support and manage enterprise-level IAM systems and services as ForgeRock and other Identity Providers (IdPs). Demonstrate expertise in configuring, troubleshooting, and enhancing these systems to meet security and access management requirements.

Authentication Standards

Ensure the adoption and implementation of authentication standards (e.g., OAuth 2.0, OpenID Connect (OIDC), SAML 2.0). Translate organizational requirements into appropriate authentication and authorization frameworks.

LDAP Knowledge

Apply a solid understanding of LDAP concepts, integration with enterprise directories, and their role in IAM systems. Troubleshoot, optimize, and maintain LDAP-based access management environments.

System Design & Deployment: Collaborate with the engineering and security teams to design, deploy, and operate secure authentication solutions across the organization. Develop and document IAM-related policies, processes, and procedures in line with best practices.

Security Monitoring & Incident Response

Assist the Information Security team with monitoring security systems, analyzing logs, identifying vulnerabilities, and addressing escalated security incidents. Support incident response efforts related to IAM solutions.

Cross-team Collaboration

Partner with other teams to design and implement secure solutions for various enterprise applications and infrastructure components.

Cloud IAM Integration

Assist in integrating IAM solutions with cloud technologies and platforms (e.g., AWS, Azure, GCP). Ensure secure identity and access management in hybrid or cloud‑native environments.

Continuous Learning & Development

Stay up to date with the latest technological advancements in IAM, security standards, and cybersecurity best practices. Participate in continuing education related to identity access management and information security.

Security Best Practices

Contribute to secure coding initiatives by developing secure enhancements and using security best practices to mitigate vulnerabilities. Ensure compliance with security standards in all IAM-related activities.

Cybersecurity Tools & Threat Management

Analyze the output of industry-standard cybersecurity tools (e.g., vulnerability scanners, SIEM systems) to identify threats and reduce risk exposure. Develop strategies to address IAM-related security weaknesses.

Incident Management

Assist in the implementation of proactive IAM measures and contribute to security breach response procedures. Aid in the management of incidents by diagnosing, troubleshooting, and remediating IAM security issues.

Custom Enhancements & Documentation

Assist in custom development using Java or other relevant programming languages for enhancements in IAM systems. Contribute to technical documentation in a software development environment, ensuring compliance with IAM best practices.

Vendor & Product Support

Collaborate with vendors and product teams for troubleshooting, maintenance, and the enhancement of IAM products and services. Ensure proper documentation and knowledge sharing within the team.

Required Qualifications

Bachelor’s degree in computer science, Cybersecurity, Engineering, or a related field (or equivalent work experience).

At least 3 years of experience in technology system support, software development, or a related field, with at least 2 years of experience in information security applications and systems, specifically IAM.

Strong working knowledge of Identity and Access Management concepts, including authentication and authorization mechanisms.

Hands‑on experience with IAM product ForgeRock. Ability to configure, troubleshoot, and manage these systems in enterprise environments.

Solid understanding of LDAP, including its role in directory services and user authentication management.

Knowledge of authentication protocols like OAuth 2.0, OpenID Connect (OIDC), and SAML 2.0, and the ability to implement these protocols in IAM environments.

Experience with API security and integration using JSON, REST, and web services.

Java development experience for customizations and enhancements of IAM systems, including writing secure, maintainable code to support authentication and authorization workflows.

Knowledge of IAM solutions in Cloud environments (AWS, Azure, or GCP) and how IAM integrates within those platforms.

Excellent written and verbal communication skills, with the ability to document technical processes and contribute to knowledge sharing.

Preferred Qualifications

Master’s degree in computer science, Cybersecurity, Business Administration, or a related field.

Experience with development life cycles (SDLC) and working on projects involving IAM system implementations.

Relevant certifications such as CISSP, CISM, CEH, CISA, OSCP, CompTIA Security+ or equivalent IAM/security certifications.

Hands‑on experience analyzing cybersecurity tools (e.g., vulnerability scanners, SIEM tools) and identifying remediation actions to reduce risk.

Advanced understanding of information security practices, policies, and standards related to IAM.

Experience with ITIL or other IT service management frameworks.

Experience with multi‑cloud IAM deployments or hybrid environments, ensuring security and access management are consistent across on‑prem and cloud infrastructures.

Lowe’s is an equal opportunity employer and administers all personnel practices without regard to race, color, religious creed, sex, gender, age, ancestry, national origin, mental or physical disability or medical condition, sexual orientation, gender identity or expression, marital status, military or veteran status, genetic information, or any other category protected under federal, state, or local law.