Lead Engineer – Enterprise Workforce Access Management, Information Security

Lowe's Companies, Inc.; Charlotte (NC); On-site; USD 111,600 - 212,000; Full time

Job summary

Lowe’s Companies, Inc. in Charlotte is seeking a senior cybersecurity architect to drive the design, implementation, and operation of enterprise information security tools and services.

You will translate business requirements into robust security software solutions and lead remediation efforts. The role focuses on authentication architectures, incident response, and guiding teams through complex security deployments across enterprise systems with emphasis on scalability, reliability, and

Qualifications

• Bachelor’s degree in a relevant field or equivalent years of experience; education substitution allowed.
• 7 years of technology system support, software development, or related field.
• 5 years designing, engineering, or supporting complex information security, identity, or infrastructure systems.
• 4 years designing/authentication solutions using OAuth 2.0, OpenID Connect, SAML 2.0, LDAP, TLS/SSL, SSO, federation, token management, and MFA.
• 4 years supporting highly available authentication/identity platforms.
• 4 years producing clear, maintainable technical documentation and diagrams.
• 5 years troubleshooting across application, identity platform, OS, network, and integration layers.
• 4 years automation or platform enhancements using Shell/JavaScript or similar.
• 4 years administering Linux/Unix systems including services, resources, and certificates.

Responsibilities

• Drive design, development, and optimization of advanced cybersecurity platforms.
• Act as technical expert for project teams implementing security solutions; document standards.
• Educate teams on architectural standards to improve efficiency.
• Lead troubleshooting, incident response, and root-cause analysis for complex issues.
• Evaluate new security technologies to meet current and future needs.
• Design and manage enterprise authentication and identity security platforms.
• Design secure auth solutions (OAuth, SAML, SSO, MFA, etc.).
• Mentor engineers and improve overall security engineering capability.
• Coordinate with leadership to align infrastructure with security standards.
• Lead remediation efforts and escalate issues when needed.
• Develop automation, scripts, integrations, and CI/CD pipelines for deployment.

Skills

Cybersecurity

Authentication

Identity platforms

Scripting

Incident response

Architecture design

Documentation

Troubleshooting

Automation

Linux/Unix

Education

Bachelor’s degree Computer Science, CIS, Engineering, Cybersecurity, or related field

Master’s degree Computer Science, CIS, Business Administration or related field

Tools

ForgeRock Access Management

ForgeRock Directory Services

ForgeRock Identity Gateway

Radiant Logic

Active Directory

LDAP

CI/CD pipelines

Git-based source control

Job description

Innovate in Charlotte

Thank you for dedicating your time and talent to Lowe’s. We want to give you more opportunities to learn and grow, so if you find a position you’re interested in below, we encourage you to apply!

Innovate in CharlotteThank you for dedicating your time and talent to Lowe’s. We want to give you more opportunities to learn and grow, so if you find a position you’re interested in below, we encourage you to apply!
The primary purpose of this role is to provide consultation and technical direction to engineers focused on supporting the design, implementation and ongoing operation of information security tools and services. This includes providing expert direction for effectively translating business requirements and functional specifications into robust enterprise security software solutions that ensure information assets are adequately protected with acceptable levels of control. This also includes facilitating successful monitoring, testing, and evaluation of security assessments of systems and leading the design and implementation of remediation solutions.

Key Responsibilities

• Drives the strategic design, development, and optimization of advanced cybersecurity platforms, harnessing expert-level scripting methodologies and custom code development to uphold the highest standards of security infrastructure and resilience
• Serves as a technical expert for project teams throughout the implementation and maintenance of assigned information security solutions; defines and oversees the documentation of detailed standards (e.g., guidelines, processes, procedures)
• Educates others on current architectural standards and guidelines to drive efficiency in the design and implementation of information security solutions
• Drive troubleshooting, incident response, root-cause analysis, and corrective actions for complex authentication, application, infrastructure, network, directory, certificate, token, session, and integration issues
• Leads the technical evaluation of new security technologies that address both current and future needs based on emerging threats and industry trends
• Lead the design, engineering, optimization, and lifecycle management of enterprise authentication and identity security platforms, with accountability for security, scalability, availability, resilience, and operational readiness
• Design secure authentication and authorization solutions using OAuth 2.0, OpenID Connect, SAML 2.0, LDAP, TLS/SSL, Single Sign-On, federation, multi-factor authentication, passwordless authentication, and risk-based authentication
• Solves complex cross-functional architecture/design and business problems; solutions are extensible; works to simplify, optimize, remove bottlenecks, etc.
• Mentor engineers, provide hands-on technical guidance, and improve the overall engineering capability of the Lowe's Information Security team
• Makes recommendations to Business and Technology leadership to ensure alignment of infrastructure applications and data with current and future security standards
• Responds to escalated security issues for enterprise systems; facilitates advanced diagnosis and troubleshooting when necessary
• Leads break/fix activities, escalating problems to senior management and/or vendors as appropriate
• Develop and maintain automation, scripts, integrations, and CI/CD pipelines to improve platform deployment, validation, monitoring, administration, and support
• Evaluates technical designs, configuration changes, scripts, integrations, deployment plans to identify potential threats to security or stability of enterprise systems
• Evaluates complex application and hosting environments to identify potential weaknesses and provide remediation plans to reduce risk
• Designs application pipelines with secure configuration parameters to remove or reduce known threat vectors

Required Qualifications

• Bachelor’s degree Computer Science, CIS, Engineering, Cybersecurity, or related field or equivalent years of experience in lieu of education requirement, if applicable
• 7 years Experience in technology system support, software development or a related field
• 5 years Experience designing, engineering, or supporting complex information security, identity, or infrastructure systems
• 4 years Experience designing and supporting authentication and authorization solutions using OAuth 2.0, OpenID Connect, SAML 2.0, LDAP, TLS/SSL, Single Sign-On, federation, token management, session management, and multi-factor authentication
• 4 years Experience supporting highly available, business-critical authentication or identity platforms
• 4 years Experience producing clear, accurate, and maintainable technical documentation, including architecture diagrams, engineering standards, operational procedures, troubleshooting guides, and implementation plans
• 5 years Experience troubleshooting complex issues across application, identity platform, operating system, network, directory, and integration layers
• 4 years Experience developing automation or platform enhancements using Shell scripting, JavaScript, or comparable scripting languages
• 4 years Experience administering or troubleshooting Linux or Unix operating systems, including services, compute resources, storage, file systems, certificates, and network connectivity

Preferred Qualifications

• Master’s degree Computer Science, CIS, Business Administration or related field
• 6 years Experience working on project(s) involving the implementation of solutions applying development life cycles (SDLC)
• 3 years Experience leading teams, with or without direct reports
• 3 years Hands-on experience implementing, engineering, or supporting ForgeRock Access Management, preferably version 7.x or later
• 3 years Experience with ForgeRock Directory Services, ForgeRock Identity Gateway, or comparable identity platform components
• 3 years Experience with Radiant Logic, Active Directory, ForgeRock Directory Services, or other LDAP-based identity repositories
• 3 years Experience designing or supporting identity platforms across multiple geographic regions
• 3 years Experience with CI/CD pipelines, automated deployments, Git-based source control, code reviews, and configuration promotion
• 3 years Experience with certificate lifecycle management, encryption, key management, and secrets-management technologies
• 2 years Experience building or supporting identity solutions using public cloud or containerized infrastructure platforms
• 3 years Experience with performance testing, capacity planning, platform upgrades, patching, and vulnerability remediation
• 4 years Experience working with an IT Infrastructure Library (ITIL) framework

About Lowe’s

Lowe’s Companies, Inc. (NYSE: LOW) is a FORTUNE® 100 home improvement company with total fiscal 2025 sales of more than $86 billion. Lowe’s employs approximately 300,000 associates and operates over 1,750 home improvement stores, 540 branches and 120 distribution centers. Based in Mooresville, N.C., Lowe’s supports the communities it serves through programs focused on creating safe, affordable housing, improving community spaces, helping to develop the next generation of skilled trade experts and providing disaster relief to communities in need. For more information, visit Lowes.com.

Lowe’s is an equal opportunity employer and administers all personnel practices without regard to race, color, religious creed, sex, gender, age, ancestry, national origin, mental or physical disability or medical condition, sexual orientation, gender identity or expression, marital status, military or veteran status, genetic information, or any other category protected under federal, state, or local law.

Pay Range: $111,600.00 - $212,000.00 annually Starting rate of pay may vary based on factors including, but not limited to, position offered, location, education, training, and/or experience. For information regarding our benefit programs and eligibility, please visit https://talent.lowes.com/us/en/benefits.