Identity Architect

At Discount Tire, we celebrate the spirit of our people with extraordinary pride and enthusiasm. Our business has been growing for 63 years and now is the best time in our history to be a part of it.

We are opening more locations every year and always looking for the most qualified individuals to join us in our growth. As a company, we promote from within, both in our retail and corporate operations.

The Identity Architect will be responsible for defining the overall architecture of the enterprise identity portfolio. This person will have a deep knowledge of multiple technology areas, processes, methodologies, standards, products, and frameworks.

1. Deliver Okta Identity Management (or experience with similar identity cloud solution) and designing solution patterns for typical and custom identity frameworks across both infrastructure and development life cycles
2. Lead engineering and solution design with Identity Provider, including base SSO setup via SAML/OpenID Connect, B2B Federation Connection setup, and with standard expression logic and PowerShell scripts used in analytical reporting and custom attribute patterns
3. Serve as the department expert for architectural solution design and documentation (Product Roadmaps) including PowerShell scripting to maintain and design analytics reports in Okta; as well as design and implement custom application-level expression language regarding attribute manipulation
4. Design and deliver appropriate architecture that support identity & access needs in meeting business goals of secure design, lifecycle, and stable operations
5. Serve as the resident expert for IAM disciplines (such as but not limited to - Identity, Sign-On, Federation, Multifactor Authentication, Privileged Access Management, Directory Services, Role-based Governance & Administration, API Security, Key and token Lifecycle, Identity Risk, Identity threat modeling)
6. Establish, document, and publish reference architecture models and promote use and adoption. Apply cross-domain experience and hands-on implementation of architecture across broad scale and multiple platforms. Build threat models for defined design to identify weaknesses in design, with appropriate mitigations
7. Develop standards and reference architecture for repeatable use cases. Document new and existing solution designs within standardized SDLC and niche use cases
8. Produce and implement enterprise-level designs for Azure authentication and on prem AD, as wells as Azure B2B/C authentication for global initiatives
9. Drive enforcement of policies, procedures, and associated plans for system security administration, highly privileged and high-risk users, and general user system access based on industry-standard best practices
10. Define standards and reference architecture for Identity and access protection within secure hybrid multi-cloud environments
11. Design solutions to on-board third party and cloud applications using various federation protocols. Architect lifecycle controls and processes in design for Identity and access of customers, partners, and B2B/C entities
12. Design full user provisioning and de-provisioning process, in line with regulatory and industry needs for termination
13. Ability to enable application movement to modern authentication in the hybrid multi-cloud environment through use of SSO and Federation
14. Design, develop, deploy, integrate, and support Single Sign On (SSO) using DevOps model for all types of devices.
15. Plan and develop security measures to safeguard information against accidental or unauthorized modification, destruction, or disclosure
16. Collaborate with management to identify security best practices; applies a risk-based approach to information security covering the security aspects of Cloud & On-premises IAM services with a focus on Authentication services (SSO and MFA)
17. Provide engineering support for the Identity and Authentication team. Mentor and develop all on the Identity Team when requested
18. Support the enterprise SSO platform to enable a secure and enhanced authentication experience for enterprise users
19. Work on a daily basis with Agile engineering scrum teams and participate in daily standups, grooming and planning to deliver product features
20. Partnering with cross-functional teams to build Identity products and constantly innovate on APIs, platform, web (desktop/mobile) and native apps (iOS and Android)
21. Facilitate cost effective solutions for integration of target applications to IAM platforms and services
22. Remain informed on trends and issues in the security industry, including current and emerging technologies and policies
23. Provide effective communications to senior management, peers, team, stakeholders, external parties as required

1. 7+ years of experience in Information Security with 7+ year in Identity Federation space
2. Passionate about Identity and Access Management with background in OAuth 2.0, OpenID connect, SAML, WS-Fed, SCIM (System for Cross domain Identity Management) and API authorization/access management
3. Prior experience in areas like password management, encryption, two factor authentication, Biometrics, WebAuthn and FIDO standards, risk-based authentication, and strong customer authentication
4. Knowledge in areas like REST APIs, GraphQL and React JS/Native
5. Knowledge and experience with information security, authorization and authentication systems, infrastructure, and implementation techniques
6. Understand the complexities of a large-scale platform with a focus on scalability, reliability and resiliency while maintaining exceptional quality of software and steady state and continuous improvement efforts for authentication technologies for globally diverse solutions
7. Strong hands-on experience with SSO & MFA leveraging AD Connect
8. Strong hands-on experience with industry standard SSO technologies and protocols (OAuth, OpenID Connect, SAML)
9. Expertise in Identity and Authentication solutions such as Active Directory, Azure AD, Azure B2B, Azure B2C and Okta
10. Knowledge of LDAP and Active Directory services, MFA, Risk based authentication and privileged access management
11. Holistic view of IAM (Authentication and Authorization Data, Endpoint Security, Network Security, Policy Engine)
12. Ability to utilize various programming or scripting languages such as PowerShell
13. Understanding of API design concepts, RESTful Services, and modern application interaction patterns
14. Familiarity with deployments and integration of IAM solutions within the cloud (Azure, AWS, GCP)
15. Experience in deploying large-scale, global projects and programs
16. Familiarity with IT security and risk management practices
17. High sense of ownership, urgency, and drive. Proven track record of getting things done, managing multiple tasks including communication with internal and external teams while consistently delivering on schedule
18. Excellent oral and written communication skills with the ability to adapt your message to the technical level of the audience (developers, product managers, and senior business leaders)
19. Demonstrated excellent technical writing skills and project/program management experience
20. Understanding of Agile Life Cycle and project planning/execution skills including estimating and scheduling. Knowledge of scrum planning tools (Jira is a plus)
21. IT Certifications including Okta, AD and Azure.

Bachelor's Degree in Computer Science, Engineering, Network Security, or related field

MBA preference

Okta Certifications highly preferred