IDAM Architect

It All Starts with Our People

As the leader in automotive preventive maintenance, Valvoline has a proven track record of growth. We continue to invest in our people, processes, and technology to strengthen our ability to efficiently deliver Quick, Easy, Trusted service across all our stores – every day. We're not just in the car business; we're in the people business. And we're looking for humble, hungry, and smart people to help us shape the future of mobility. If you're hungry to drive change and seek a dynamic, collaborative environment that fuels both personal and professional growth, you've found your place with us.

Our highest priority is creating a welcoming workplace with team members from a wide variety of diverse backgrounds and experiences.

The Opportunity

Valvoline has a rewarding opportunity as an Identity and Access Management (IDAM) Architect. In this role, you will be responsible for the overall architecture, design and solutioning of IDAM platforms along with IDAM related integrations with other enterprise systems and platforms. The IDAM Architect collaborates with other cross functional areas (development, infrastructure, application solutions, business, and other IT groups) to develop, deploy, administer, and support IDAM capabilities for all critical applications and systems within the organization.

How You'll Make a Difference

• Facilitate architectural design and solutioning of IDAM platforms that also includes technical design documents. Evaluate and recommend best IDAM solution to the organization based upon business requirements and services provided.
• Lead IDAM integration efforts and collaborate with various stakeholders on integrating IDAM capabilities based upon application requirements as it relates to identity.
• Engage stakeholders on capabilities and optimization relating to IDAM architecture. Gather, analyze, and assess business requirements relating to IDAM.
• Promote and enable best practices relating to IDAM security and communicate throughout the organization. Document policies and procedures relating to these best practices. Review current policies and processes and provide recommendations on improvement.
• Assess opportunities on enabling IDAM capabilities on applications and platforms not managed by IT within the organization.
• Design, develop, and implement solutions relating to ID (workplace, B2B, B2C) life-cycle management, workflow processes for access control and role-based security, and privilege account management.
• Design, develop, and implement solution strategies on access controls relating to privilege/elevated user accounts (Privilege Access Management).
• Other duties and responsibilities as determined by Valvoline from time to time in its sole discretion.

What You'll Need to Succeed

• Bachelor's degree in IT, engineering, business, management or a related field, or equivalent work experience
• Minimum of 10 years of overall IT experience
• Minimum of seven years of experience in the IDAM space
• Minimum of four years of experience in equivalent IDM solutions (e.g. Sailpoint, Forgerock/Ping Identity, Oracle, Okta, One Identity, EntraID etc.)
• Minimum of four years of experience in equivalent PAM solutions (e.g. CyberArk, Hashicorp, BeyondTrust, Delinea)
• Minimum of two years of managing architectural tasks within the IDAM space
• Minimum of two years of Identity experience working for a retail organization
• Experience in Project Management
• Experience in architectural design and implementation
• Hands on experience in administrating IDM solutions
• Experience in Windows Active Directory, Azure, Apache, Tomcat, UNIX, Linux, Tivoli LDAP, AWS
• Experience in Privilege Access Management Platforms
• Experienced in scripting or programming languages: PowerShell, UNIX Shell, Python, Java. Collaboration ability with key stakeholders, both business and IT
• Strong communication skills, both oral and written. Experience in technical documentation
• Experience in developing solutions relating to RBAC (Role-based Access Control)
• Knowledge of software solutions and/or web services as it relates to development, scripting, programming, design, testing, and production deployment
• Strong understanding and hands on experience in OAuth, OIDC, SAML
• Hands on experience with SSL certificate management (AWS, Entrust, Microsoft)
• Must be authorized to work in the U.S.

We Take Care of the WHOLE You

• Health insurance plans (medical, dental, vision)
• HSA and flexible spending accounts
• 401(k)
• Incentive opportunity*
• Life insurance
• Short and long-term disability insurance
• Paid vacation and holidays*
• Employee Assistance Program
• Valvoline Instant Oil Change discounts
• Tuition reimbursement*
• Adoption assistance*

*Terms and conditions apply, and benefits may differ depending on position.