Lead Engineer CIAM (Customer Identity Acess Management), Information Security

Innovate in Charlotte

Thank you for dedicating your time and talent to Lowe’s.  We want to give you more opportunities to learn and grow, so if you find a position you’re interested in below, we encourage you to apply!

The Lead Customer Identity and Access Management (CIAM) Engineer serves as the technical leader responsible for the design, implementation, operation, and modernization of Lowe's enterprise customer identity platform. This role provides technical direction for secure, scalable identity services supporting millions of customer accounts across digital experiences. The engineer partners with digital, product, engineering, architecture, and cybersecurity teams to deliver authentication, authorization, identity lifecycle, and customer profile management capabilities while driving platform reliability, operational excellence, and future CIAM strategy.

Key Responsibilities:

• Lead the design, implementation, and operation of Lowe's enterprise Customer Identity and Access Management (CIAM) platform supporting millions of customer identities.

• Serve as the technical expert for customer identity architecture, authentication, federation, identity lifecycle management, and customer profile services.

• Design and implement secure identity solutions using OAuth 2.0, OpenID Connect (OIDC), SAML, SCIM, REST APIs, and modern authentication standards.

• Lead architecture and design discussions for customer registration, login, MFA, account recovery, progressive profiling, and identity orchestration.

• Drive modernization initiatives across the CIAM ecosystem, evaluating emerging identity technologies and cloud-native platforms.

• Design highly available, scalable, and resilient identity services that support enterprise digital applications.

• Partner closely with Digital Product, Engineering, Enterprise Architecture, Infrastructure, and Cybersecurity teams to deliver secure customer identity capabilities.

• Lead complex troubleshooting efforts involving authentication, federation, identity synchronization, directory services, and customer identity integrations.

• Establish engineering standards, development best practices, operational procedures, and technical documentation for CIAM services.

• Mentor engineers through architecture reviews, design sessions, code reviews, and technical coaching.

• Provide technical leadership during production incidents, platform upgrades, vendor engagements, and root cause analysis.

• Drive continuous improvements in platform scalability, performance, observability, automation, and operational excellence.

• Evaluate new CIAM technologies and make recommendations that align with Lowe's long-term customer identity strategy.

Required Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, or related field (or equivalent experience)

• 7+ years of software engineering, Identity & Access Management, or related experience

• 5+ years designing, implementing, and supporting enterprise Customer Identity and Access Management (CIAM) solutions

• Experience with one or more enterprise CIAM platforms such as ForgeRock, Ping Identity, Auth0, Okta Customer Identity, Transmit Security, or Microsoft Entra External ID

• Strong understanding of OAuth 2.0, OpenID Connect (OIDC), SAML, SCIM, JWT, MFA, WebAuthn/FIDO2, and modern authentication protocols

• Experience with LDAP directories, identity synchronization, customer profile management, and identity lifecycle services

• Experience developing or integrating REST APIs and microservices

• Experience with Java, JavaScript, Groovy, or similar programming languages

• Strong troubleshooting and problem-solving skills across distributed identity systems

Preferred Qualifications:

• Experience administering and developing on the ForgeRock Identity Platform (AM, IDM, DS)

• Experience with Ping Identity products or Auth0

• Experience supporting customer identity platforms at enterprise scale