Lead Engineer - Authentication & Access Management

** Innovate in Charlotte*
* Thank you for dedicating your time and talent to Lowe's.  We want to give you more opportunities to learn and grow, so if you find a position you're interested in below, we encourage you to apply!

The primary purpose of this role is to provide technical leadership for the design, engineering, modernization, and operational excellence of Lowe's Enterprise Access Management platform. This role is responsible for delivering secure, highly available authentication and Single Sign-On (SSO) services that support approximately 300,000 associates across more than 1,750 retail stores, 540 branch locations, 120 distribution centers, corporate offices, and hundreds of internal enterprise applications.

As the Lead Engineer for Enterprise Access Management, you will own the engineering lifecycle of Lowe's workforce authentication platform, ensuring it remains secure, resilient, scalable, and operationally excellent. You will partner closely with application owners, infrastructure engineering, cybersecurity, architects, and business stakeholders to design and implement secure authentication solutions while helping drive the modernization of Lowe's identity platform.

This role combines deep technical expertise with engineering leadership. Success requires balancing operational excellence of the current Forge Rock Access Management platform while helping shape the future of enterprise authentication through cloud-native identity services, modern authentication standards, Dynamic Client Registration, API integrations, and emerging AI-enabled identity use cases.

** Key Responsibilities*
* ** Enterprise Platform Engineering*
* + Lead the engineering, lifecycle management, modernization, and operational excellence of Lowe's Enterprise Access Management platform supporting workforce authentication across hundreds of enterprise applications.

+ Design, implement, and optimize secure enterprise authentication and Single Sign-On solutions for workforce access.

+ Design authentication and authorization solutions using OAuth 2.0, OpenID Connect (OIDC), SAML 2.0, LDAP, TLS/SSL, Single Sign-On, federation, multi-factor authentication (MFA), passwordless authentication, adaptive authentication, token management, and session management.

+ Own platform architecture decisions with accountability for security, scalability, resilience, availability, recoverability, and performance.

+ Lead platform upgrades, feature adoption, engineering improvements, and modernization initiatives.

** Platform Stability & Operational Excellence*
* + Drive platform stability through proactive performance analysis, resiliency improvements, observability, capacity planning, root cause analysis, and continuous service optimization.

+ Lead troubleshooting, incident response, root cause analysis, and corrective actions for complex authentication, application, infrastructure, network, directory, certificate, token, session, and integration issues.

+ Respond to escalated production issues and provide technical leadership during major incidents involving enterprise authentication services.

+ Establish engineering standards for monitoring, alerting, logging, operational readiness, disaster recovery, and service reliability.

+ Continuously improve platform performance and operational maturity through automation and engineering best practices.

** Application Integration & Technical Leadership*
* + Serve as the technical advisor for application teams onboarding to the Enterprise Access Management platform.

+ Partner with application owners, infrastructure teams, cybersecurity, architects, and business stakeholders to design secure authentication solutions and integration patterns.

+ Engineer secure federation and trust relationships with enterprise applications using OAuth 2.0, OpenID Connect, SAML 2.0, LDAP, REST APIs, and modern identity standards.

+ Design and implement modern OAuth 2.0 capabilities including Dynamic Client Registration, machine-to-machine authentication, API gateway integrations, and secure application onboarding.

+ Design and troubleshoot integrations with enterprise identity providers, LDAP directories, and authentication services supporting workforce access management.

** Modernization & Innovation*
* + Lead technical initiatives supporting the modernization of enterprise authentication services, including migration from on-premises identity infrastructure toward cloud-native and SaaS-based identity platforms.

+ Evaluate emerging authentication…