IT Authentication Architect

Contract position with a hybrid schedule (3 days remote, 2 days on-site). Reference: #HbM6349

Requirements

• Previous automotive manufacturing experience
• Bachelor's or Master's degree in Computer Science, Information Security, or related technical field (or equivalent relevant experience)
• 10 years of hands-on experience with MFA enablement, support, and troubleshooting
• 5 years of experience with Entra ID and OpenText NetIQ Advanced Authentication
• 10 years of successfully delivering complex MFA projects in large-scale enterprise environments
• 10 years of experience driving products from concept and ideation through successful launch
• 10 years of experience working on a team employing standardized project delivery methods (Agile/Scrum preferred)
• 10 years of experience understanding and working with non-functional requirements
• 10 years of experience working in an enterprise environment
• Relevant industry certifications such as CISSP, SANS GIAC (e.g., GSEC, GCWN), or Microsoft Certified: Azure Security Engineer Associate (preferred)
• Expert skills in MS Office (Word, Excel, PowerPoint, Outlook, SharePoint, Access)
• Expert skills in professional communication (written, verbal, and presentation)
• Advanced proficiency in NetIQ Advanced Authentication
• Expert knowledge of testing methodologies and tools, including test automation
• Expert knowledge of root cause analysis, debugging methods, and diagnostic tools
• Advanced knowledge of databases and query language (e.g., PSQL)
• Expert knowledge of modern operating systems (especially MS Windows and Unix/Linux derivatives)
• Expert knowledge of IT Security and risk assessment
• Expert knowledge of Multifactor Authentication including HOTP, mobile push, TOTP, and FIDO2 passkeys
• Advanced knowledge of Identity & Access Management (Microsoft Entra ID/Azure AD, MFA, SSO, Conditional Access, Identity Governance, User Provisioning & Administration)
• Advanced knowledge of Authentication Technologies (FIDO2, WebAuthn, Passkeys, HOTP, TOTP, YubiKey, Windows Hello for Business, NetIQ Advanced Authentication)
• Advanced knowledge of Password Management (Bitwarden, KeePassXC, Credential management concepts, Privileged credential handling)
• Advanced knowledge of API & Development (Postman, REST APIs, Microsoft Graph API, JSON)
• Advanced skills in basic scripting and development (PowerShell, JavaScript, Python preferred)
• Advanced knowledge of Monitoring & Reporting (Splunk, Power BI, log analysis and troubleshooting)
• Advanced knowledge of Operating Systems (Windows and/or basic Linux administration)

Responsibilities

• Operate, administer, support, and evolve enterprise authentication and credential management platforms
• Focus on 3rd-level support, user administration, troubleshooting, integration, and continuous improvement of identity and access management solutions, password management platforms, multifactor authentication technologies, and passkey-based authentication
• Work closely with security, infrastructure, application teams, and business stakeholders to ensure secure, scalable, and user-friendly authentication experiences across cloud and on-premises environments
• Provide Level 3 support for enterprise identity and authentication services
• Troubleshoot complex authentication, authorization, and credential-related issues
• Administer and support Microsoft Entra ID, authentication platforms, and directory-integrated services
• Manage user lifecycle processes including onboarding, access modifications, entitlement updates, and offboarding
• Support passwordless and multifactor authentication solutions
• Investigate authentication incidents and perform root-cause analysis
• Work with service desk and Level 2 teams to resolve escalated issues
• Administer, support, and troubleshoot enterprise password management solutions including Bitwarden & KeePassXC
• Support password vaulting, credential sharing, access controls, auditing, and governance
• Assist with adoption of secure credential management practices across business and technical teams
• Support and implement authentication technologies including Microsoft Entra ID Authentication, NetIQ Advanced Authentication, YubiKey, Passkeys, FIDO2, WebAuthn, HOTP, TOTP, Mobile Push Authentication, & Windows Hello for Business
• Assist with deployment, registration, troubleshooting, and user support for strong authentication solutions
• Participate in the design and rollout of modern passwordless authentication strategies
• Develop, test, and troubleshoot APIs using Postman, REST APIs, Graph APIs, & JSON-based integrations
• Support integration of identity platforms with internal and external applications
• Create and maintain automation scripts and small development components
• Assist application teams with authentication and SSO integration requirements
• Monitor authentication systems for operational health and security events
• Support security investigations involving authentication, access management, and credential usage
• Create dashboards, reports, and operational metrics
• Perform log analysis using Splunk, Microsoft security tools, & other monitoring platforms
• Build operational and security reporting using Power BI & Splunk
• Produce KPIs and trend analyses related to authentication services and user administration
• Identify opportunities to automate repetitive support and administration tasks
• Leverage Microsoft Copilot and AI-based tools to improve operational efficiency and user experience
• Develop AI-assisted workflows, automation solutions, documentation, and support processes
• Contribute to continuous service improvement initiatives
• Perform other duties as assigned by Group Operations Supervisor