Cloud Infrastructure Engineer

Blue Ribbon Global Technologies; Seattle (WA); On-site; USD 130,000 - 190,000; Full time

Job summary

lululemon is seeking an experienced Identity and Access Management engineer to design, implement, and support global enterprise IAM services including SSO, Federation, and MFA.

The role focuses on delivering scalable security controls, collaborating with application teams, and ensuring data integrity and governance across cloud and on-premises environments. Strong scripting and cloud experience are required.

Qualifications

• 4+ years hands-on project and operations experience in enterprise cloud infrastructure.
• 3+ years with SSO, Federation, and MFA at scale.
• Expert in SAML 2.0, OAuth 2.0, OIDC, JWT, SCIM, LDAP/S, Kerberos protocols.

Responsibilities

• Support IAM services for global enterprise with SSO, MFA, and Federation.
• Build and mature identity and access controls with governance.
• Collaborate with application teams for self-service and least privileged access.
• Provide end-user support and maintain systems and data integrity.

Skills

Azure AD SSO

MFA

SAML 2.0

OAuth 2.0 / OIDC

LDAP / Kerberos

Azure/AWS IaaS

PowerShell

Python

JavaScript

PIM/PAM

Job description

Who we are

lululemon is an innovative performance apparel company for yoga, running, training, and other athletic pursuits. Setting the bar in technical fabrics and functional design, we create transformational products and experiences that support people in moving, growing, connecting, and being well. We owe our success to our innovative product, emphasis on stores, commitment to our people, and the incredible connections we;re in. As a company, we focus on creating positive change to build a healthier, thriving future. In particular, that includes creating an equitable, inclusive and growth-focused environment for our people.

About this team

The lululemon Identity and Access Management (IAM) team within Cybersecurity, provides services for the global enterprise. We seek out efficiencies and innovation in order to facilitate rapid change, scalability, and maturity of core security services for the modernizing lululemon environment. The IAM portfolio encompasses the planning, design, implementation, maintenance, support, and continuous improvement of identity and access services. We are currently searching for an engineer, who is a security-minded subject matter expert of building and maintaining global enterprise-scale services such as; Single Sign-On (SSO), Federation and Multi-Factor Authentication (MFA).op of mind.

• Support project efforts through building modernized IAM capabilities utilizing standardized
• frameworks to foster sustainability and growth
• Identify technical and process gaps, foster technical collaboration, stay up-to-date with trends
• Build, enhance and mature identity and access technologies and controls that leverage best

• A day in the life:

  • Our Identity and Access services play an important role in the organization. Providing a great user experience, supporting resilient scalable services, while providing fundamental security enforcement, must be t
  practices, aligned to governance controls, and establish solid scalable foundations
• Implement technology workflows and rules to maintain accuracy of data to managed systems
• Provide stellar end-user support with on-going operations tasks, enhancements, and bug fixes
• Maintain and upgrades systems, processes, and other necessary support as part of continuous
• improvement model
• Collaborate closely with application teams to establish self-service, automation, least privileged
• access and promote adoption
• Collaborate closely with global IAM team members, cybersecurity, infrastructure, digital and
• other technology teams to ensure appropriate business resiliency, end-to-end data integrity,
• GRC (governance, risk, compliance) enforcement controls, and security requirements

Qualifications:

• 4+ years hands-on project and operations experience, including implementation, maintenance,
• and maturing enterprise cloud infrastructure and cloud authentication solutions
• 4+ years maturing cybersecurity and/or infrastructure solutions
• 3+ years of deep technical experience with Azure AD Global or similar SSO,
• Federation, and MFA solutions at B2E, B2B and/or B2C scale
• 3+ years of experience with authentication solutions, such as Active Directory and/or other
• LDAP technologies
• 2+ years of experience with Azure IaaS and/or AWS IaaS solutions is preferred
• Experience supporting global regulatory compliant solutions is preferred
• Familiarity with Azure AD China and/or other China IDaaS solutions is a plus
• Expert in SAML 2.0, OAuth 2.0, OIDC, JWT, SCIM, LDAP/S, Kerberos protocols
• Expert in network security support and analysis tactics
• Expert in 2 or more coding languages PowerShell, C+, SQL, Python, JavaScript
• and/or others
• Experience working with Privilege Identity/Access Management (PIM/PAM) solutions is a plus
• Experience working with Microsoft CA and/or PKI solutions is a plus
• Broad knowledge of DEVOPS processes and best practices
• Collaborative team player, who will work closely with IAM and other teams
• Excellent interpersonal, written and verbal skills with an ability to express technical concepts in
• business terms
• Great technical and system documentation skills

Must haves:

Acknowledges the presence of choice in every moment and takes personal responsibility for

their life. Possesses an entrepreneurial spirit and continuously innovates to achieve great results. Communicates with honesty and kindness, and creates the space for others to do the same. Leads with courage, knowing the possibility of greatness is bigger than the fear of failure.

Fosters connection by putting people first and building trusting relationships.

Integrates fun and joy as a way of being and working, aka doesn't take themselves too

seriously.

Required Skills :

Basic Qualification :

Additional Skills :

Background Check : No

Drug Screen : No