IT Authentication Architect

Hired by Matrix, Inc; Greenville (SC); Hybrid; USD 140,000 - 180,000; Part time

Job summary

Matrix, Inc seeks an IT Authentication Architect for an international automotive company. This contract role is hybrid (3 days WFH, 2 days in-office) with relocation possible under a plan.

The position emphasizes enterprise authentication, credential management, and advanced MFA deployments across cloud and on-prem environments. You will lead technical delivery, collaborate with security, infra, and app teams, and support passwordless and MFA initiatives while driving automation and governance

Qualifications

• Bachelor's or Master's degree in Computer Science, Information Security, or a related technical field.
• 10 years of hands-on MFA enablement, support, and troubleshooting.
• 5 years in Entra ID, OpenText NetIQ Advanced Authentication.
• 10 years delivering complex MFA projects in large-scale enterprise environments.
• 10 years driving products from concept to launch.
• 10 years of experience with Agile/Scrum development methods.
• 10 years understanding and working with non-functional requirements.
• 10 years in an enterprise environment.
• Relevant industry certifications (e.g., CISSP, SANS GIAC, Azure Security Engineer) preferred.

Responsibilities

• Operate, administer, and evolve enterprise authentication and credential management platforms.
• Provide Level 3 support for enterprise identity and authentication services and troubleshoot complex issues.
• Administer Microsoft Entra ID and directory-integrated services; manage user lifecycles.
• Support passwordless and multifactor authentication solutions and investigate incidents.
• Develop APIs using Postman, REST APIs, Graph APIs, and JSON-based integrations.
• Create automation scripts and small development components to improve operations.
• Monitor authentication systems and build dashboards and reports for KPIs and trends.

Skills

MFA expertise

Entra ID

NetIQ Advanced Authentication

OpenText NetIQ

Root cause analysis

Scripting (PowerShell/JS/Python)

REST/Graph APIs

Testing & test automation

Windows

Unix/Linux

Education

Bachelors/Masters in CS/Info Security

Tools

Postman

REST APIs

Graph API

JSON

Splunk

Power BI

KeePassXC

Bitwarden

Job description

At-a-Glance

Join an international automotive company as an IT Authentication Architect, focusing on enterprise authentication and credential management platforms.

Position Type

• Contract
• Hybrid (3 Days WFH and 2 days per week in the office)
• Relocation candidates may be considered with a specific relocation plan.

Required

• Previous automotive manufacturing or BMW experience.
• Bachelor's or Master's degree in Computer Science, Information Security, or a related technical field.
• 10 years of hands‑on experience with MFA enablement, support, and troubleshooting.
• 5 years of experience in Entra ID, OpenText NetIQ Advanced Authentication.
• 10 years of successfully delivering complex MFA projects in large‑scale enterprise environments.
• 10 years of experience driving products from concept and ideation through successful launch.
• 10 years of experience working on a team employing standardized project delivery methods (Agile/Scrum development methods preferred).
• 10 years of experience in understanding and working with non‑functional requirements.
• 10 years of experience working in an enterprise environment.
• Relevant industry certifications (or equivalents) such as CISSP, SANS GIAC (e.g., GSEC, GCWN), or Microsoft Certified: Azure Security Engineer Associate (preferred).
• Expert skills in MS Office (Word, Excel, PowerPoint, Outlook, SharePoint, Access).
• Expert skills in professional communication (written, verbal, and presentation).
• Advanced proficiency in NetIQ Advanced Authentication.
• Expert knowledge of testing methodologies and tools, including test automation.
• Expert knowledge of root cause analysis, debugging methods, and diagnostic tools.
• Advanced knowledge of databases and query language (e.g., PSQL).
• Expert knowledge of modern operating systems (especially but not limited to MS Windows and Unix/Linux derivatives).
• Expert knowledge of IT Security and risk assessment.
• Expert knowledge of Multifactor Authentication including HOTP, mobile push, TOTP, and FIDO2 passkeys.
• Advanced knowledge of Identity & Access Management (Microsoft Entra ID (Azure AD), Multifactor Authentication (MFA), Single Sign-On (SSO), Conditional Access, Identity Governance, and/or User Provisioning & Administration).
• Advanced knowledge of Authentication Technologies (FIDO2, WebAuthn, Passkeys, HOTP, TOTP, YubiKey, Windows Hello for Business, and/or NetIQ Advanced Authentication).
• Advanced knowledge of Password Management (Bitwarden, KeePassXC, Credential management concepts, and/or Privileged credential handling).
• Advanced knowledge of API & Development (Postman, REST APIs, Microsoft Graph API, and/or JSON).
• Advanced skills in Basic scripting and development (PowerShell, JavaScript, and/or Python (preferred)).
• Advanced knowledge of Monitoring & Reporting (Splunk, Power BI, and/or Log analysis and troubleshooting).
• Advanced knowledge of Operating Systems (Windows and/or Basic Linux administration).

Preferred

• Bachelor's degree or equivalent relevant experience.

Responsibilities

• Operate, administer, support, and evolve enterprise authentication and credential management platforms.
• Focus on 3rd-level support, user administration, troubleshooting, integration, and continuous improvement of identity and access management solutions, password management platforms, multifactor authentication technologies, and passkey‑based authentication.
• Work closely with security, infrastructure, application teams, and business stakeholders to ensure secure, scalable, and user‑friendly authentication experiences across cloud and on‑premises environments.
• Provide Level 3 support for enterprise identity and authentication services.
• Troubleshoot complex authentication, authorization, and credential‑related issues.
• Administer and support Microsoft Entra ID, authentication platforms, and directory‑integrated services.
• Manage user lifecycle processes including onboarding, access modifications, entitlement updates, and offboarding.
• Support passwordless and multifactor authentication solutions.
• Investigate authentication incidents and perform root‑cause analysis.
• Work with service desk and Level 2 teams to resolve escalated issues.
• Administer, support, and troubleshoot enterprise password management solutions including Bitwarden & KeePassXC.
• Support password vaulting, credential sharing, access controls, auditing, and governance.
• Assist with adoption of secure credential management practices across business and technical teams.
• Support and implement authentication technologies including Microsoft Entra ID Authentication, NetIQ Advanced Authentication, YubiKey, Passkeys, FIDO2, WebAuthn, HOTP, TOTP, Mobile Push Authentication, & Windows Hello for Business.
• Assist with deployment, registration, troubleshooting, and user support for strong authentication solutions.
• Participate in the design and rollout of modern passwordless authentication strategies.
• Develop, test, and troubleshoot APIs using Postman, REST APIs, Graph APIs, & JSON‑based integrations.
• Support integration of identity platforms with internal and external applications.
• Create and maintain automation scripts and small development components.
• Assist application teams with authentication and SSO integration requirements.
• Monitor authentication systems for operational health and security events.
• Support security investigations involving authentication, access management, and credential usage.
• Create dashboards, reports, and operational metrics.
• Perform log analysis using Splunk, Microsoft security tools, & other monitoring platforms.
• Build operational and security reporting using Power BI & Splunk.
• Produce KPIs and trend analyses related to authentication services and user administration.
• Identify opportunities to automate repetitive support and administration tasks.
• Leverage Microsoft Copilot and AI‑based tools to improve operational efficiency and user experience.
• Develop AI‑assisted workflows, automation solutions, documentation, and support processes.
• Contribute to continuous service improvement initiatives.
• Perform other duties as assigned by Group Operations Supervisor.

If your background aligns with what we’re looking for, you may receive a call from Ava, our virtual recruiter, for a brief screening conversation. Ava will ask a few questions about your experience and interest in the opportunity.

#HbM6349