Global IAM Cloud Engineer (SSO/MFA)

Blue Ribbon Global Technologies; Seattle (WA); On-site; USD 130,000 - 190,000; Full time

Job summary

lululemon is seeking an experienced Identity and Access Management engineer to design, implement, and support global enterprise IAM services including SSO, Federation, and MFA.

The role focuses on delivering scalable security controls, collaborating with application teams, and ensuring data integrity and governance across cloud and on-premises environments. Strong scripting and cloud experience are required.

Qualifications

• 4+ years hands-on project and operations experience in enterprise cloud infrastructure.
• 3+ years with SSO, Federation, and MFA at scale.
• Expert in SAML 2.0, OAuth 2.0, OIDC, JWT, SCIM, LDAP/S, Kerberos protocols.

Responsibilities

• Support IAM services for global enterprise with SSO, MFA, and Federation.
• Build and mature identity and access controls with governance.
• Collaborate with application teams for self-service and least privileged access.
• Provide end-user support and maintain systems and data integrity.

Skills

Azure AD SSO

MFA

SAML 2.0

OAuth 2.0 / OIDC

LDAP / Kerberos

Azure/AWS IaaS

PowerShell

Python

JavaScript

PIM/PAM

Job description

lululemon is seeking an experienced Identity and Access Management engineer to design, implement, and support global enterprise IAM services including SSO, Federation, and MFA.

The role focuses on delivering scalable security controls, collaborating with application teams, and ensuring data integrity and governance across cloud and on-premises environments. Strong scripting and cloud experience are required.