Engineer, Information Security; IAM​/Cloud Security

Innovate in Charlotte Your Impact

The primary purpose of this role is to support the design, implementation, and ongoing operations of enterprise identity, access, and cloud security solutions. This includes translating business and technical requirements into robust enterprise IAM and cloud security implementations that ensure information assets are protected with appropriate levels of control.

The engineer in this role will focus primarily on Microsoft Entra  (formerly known as Azure Active Directory), Microsoft 365 administration, and IAM automation, while supporting broader enterprise cloud integrations (including GCP and Oracle Cloud). The position also involves monitoring, testing, and evaluating security configurations, performing troubleshooting, and implementing remediation steps to maintain compliance and operational excellence.

To be successful, the individual must possess hands‑on experience across Azure, Microsoft 365 ecosystems, and broader IAM disciplines and work collaboratively across engineering and security teams.

• Design, build, and maintain IAM and Azure-based identity systems, including:
  • Azure AD user and directory management.
  • Conditional Access policies (creation, testing, modification)
  • Azure enterprise and app registrations, and SSO integrations
  • Permissions and role‑based access control (RBAC) administration across applications and projects.
• Support and maintain Office 365 suite integrations, including Exchange, Teams, and SharePoint.
• Manage identity integrations between on‑prem Active Directory and Azure AD (AAD Connect, ADFS).
• Implement and manage Azure Automation for identity provisioning, role assignment, and alerting.
• Assist with security monitoring and compliance efforts, including Purview and Microsoft Defender.
• Collaborate with security and engineering teams to design and implement secure access and automation solutions.
• Participate in IAM and cloud‑related incident response, troubleshooting, and root cause analysis.
• Partner with cross‑functional teams (Ops, Security, Engineering) to support hybrid‑cloud identity operations.
• Develop and maintain documentation, operational runbooks, and automation scripts.
• Stay informed on emerging IAM and cloud technologies to recommend improvements.

• Bachelor's degree in Computer Science, Information Systems, Engineering, Cybersecurity, or a related field — or equivalent work experience.
• 2‑3 years of hands‑on experience in Azure or Microsoft identity and cloud administration.
• 2‑3 years of experience working with Microsoft Active Directory/Azure SSO/Scripting, Python, or Power Shell.
• Experience managing and troubleshooting Azure Active Directory, Conditional Access, and O365 environments.
• Familiarity with IAM concepts (role‑based access, SSO, federation, lifecycle management).
• Basic understanding of scripting and automation (Power Shell, Azure Automation, or similar tools).

• Advanced expertise in Azure AD, Office 365, and cloud IAM administration.
• Experience with Active Directory Federation Services (ADFS) and AAD Connect.
• Working knowledge of Microsoft Purview, Defender, and compliance/security controls.
• Familiarity with GCP identity management and Oracle Cloud SSO integrations.
• Understanding of SCIM provisioning and identity automation frameworks.
• Experience with incident response and security vulnerability remediation processes.
• Relevant certifications such as AZ‑500, SC‑300, CISSP, or Microsoft Certified:
  Identity and Access Administrator.
• Knowledge of ITIL practices and enterprise operations.

• Associates are required to relocate to the Charlotte region to foster collaboration and facilitate improved testing and support.
• Lowe’s supports a Flex Office concept where in‑person work is required two days per week at the Charlotte Tech Hub.
• Most business meetings are planned around the Eastern time zone.

Pay Range: $75,300.00 - $ annually. Starting rate of pay may vary based on factors including, but not limited to, position offered, location, education, training, and/or experience. For information regarding our benefit programs and eligibility, please visit

Lowe's is an equal opportunity employer and administers all personnel practices without regard to race, color, religious creed, sex, gender, age, ancestry, national origin, mental or physical disability or medical condition, sexual orientation, gender identity or expression, marital status, military or veteran status, genetic information, or any other category protected under federal, state, or local law.