Senior Engineer, Vendor Identity & Access Management

** Innovate in Charlotte*
* Thank you for dedicating your time and talent to Lowe's.  We want to give you more opportunities to learn and grow, so if you find a position you're interested in below, we encourage you to apply!

The primary purpose of this role is to design, engineer, implement, enhance, and support Lowe's Vendor Identity & Access Management (IAM) platform, providing secure identity lifecycle management, authentication, authorization, federation, and Single Sign-On capabilities for Lowe's vendors, suppliers, partners, and other external business users.

The Senior Engineer serves as a hands-on senior technical contributor responsible for engineering and supporting the Vendor IAM platform, including Forge Rock Access Management (AM), Identity Management (IDM), Directory Services (DS), and Identity Gateway (IG).

** Your Impact*
* This role requires technical depth across identity platforms, authentication protocols, Linux infrastructure, directory services, networking, automation, observability, and production troubleshooting. The engineer will independently drive complex technical assignments and investigations while collaborating with application owners, infrastructure, network, security, and other engineering teams.

A major focus of this role is improving the stability, resiliency, performance, observability, and operational maturity of the Vendor IAM platform while contributing to its continued modernization.

** What You Will Do*
* ** Vendor IAM Platform Engineering*
* + Design, engineer, implement, enhance, and support Lowe's Vendor IAM platform across Forge Rock AM, IDM, DS, and IG.

+ Configure, maintain, optimize, and troubleshoot authentication journeys/trees, realms, applications, agents, identity stores, authentication policies, scripts, and platform integrations.

+ Develop and support IDM managed objects, connectors, provisioning, synchronization, reconciliation, REST APIs, and vendor identity lifecycle workflows.

+ Engineer and troubleshoot Forge Rock DS capabilities including LDAP operations, replication, indexing, schema, performance, capacity, availability, backup/recovery, and data integrity.

+ Configure and troubleshoot Forge Rock IG routes, filters, authentication integrations, policies, and application access patterns.

+ Independently implement complex identity platform configurations, scripts, integrations, and enhancements.

+ Develop and document engineering standards, implementation procedures, troubleshooting guidance, and platform best practices.

** Authentication, Authorization & Federation*
* + Design, implement, and troubleshoot authentication and authorization solutions using OAuth 2.0, OpenID Connect, SAML 2.0, LDAP, TLS/SSL, Single Sign-On, federation, MFA, token management, and session management.

+ Support B2B and partner federation patterns involving vendors, suppliers, external organizations, and external Identity Providers.

+ Troubleshoot protocol-level issues involving OAuth, OIDC, SAML, LDAP, certificates, claims, tokens, sessions, redirects, and authentication flows.

+ Support modern authentication capabilities including step-up, passwordless, and risk-based authentication.

+ Apply secure engineering practices to authentication, authorization, identity federation, session management, and application integrations.

** Vendor Identity Lifecycle*
* + Engineer identity lifecycle capabilities supporting vendor, supplier, partner, and other external identities.

+ Develop and troubleshoot identity creation, update, activation, deactivation, provisioning, reconciliation, and synchronization processes.

+ Engineer integrations between Forge Rock IDM, DS, authoritative identity sources, applications, APIs, and downstream services.

+ Troubleshoot identity data flows, synchronization failures, reconciliation issues, provisioning failures, and data inconsistencies.

+ Develop REST APIs, scripts, and automated integrations supporting vendor identity services.

+ Collaborate with application owners and business stakeholders to translate identity requirements into secure technical solutions.

** Platform Stability & Production Engineering*
* + Drive platform stability through performance analysis, resiliency improvements, capacity planning, root-cause analysis, and continuous service optimization.

+ Independently investigate complex issues spanning Forge Rock AM, IDM, DS, IG, applications, Linux, networks, load balancers, firewalls, directories, certificates, APIs, and external integrations.

+ Diagnose authentication…