IT Authentication Architect

SWJ Technology specializes in providing engineering, planning, and project management services across various industries. We are currently seeking a IT Authentication Architect for a client in the automotive industry, specializing in car manufacturing. This role is a contractor position based in Spartanburg, SC that requires onsite presence. If you’re eager to grow your career and make a meaningful impact on exciting projects, we look forward to your application. PURPOSE: The IT Authentication Architect is responsible for the operation, administration, support, integration, and continuous improvement of enterprise authentication and credential management platforms. This role provides advanced Level 3 support for Identity and Access Management (IAM), Multifactor Authentication (MFA), password management, and modern passwordless authentication technologies across cloud and on-premises environments. The IT Authentication Architect works closely with cybersecurity, infrastructure, application, service desk, and business teams to ensure secure, scalable, reliable, and user-friendly authentication services. The role will also contribute to the modernization of authentication capabilities through automation, API integrations, and emerging technologies such as passkeys and FIDO2. RESPONSIBILITIES: Provide Level 3 support for enterprise authentication, IAM, MFA, and credential management servicesAdminister and troubleshoot Microsoft Entra ID, NetIQ Advanced Authentication, and directory-integrated authentication servicesSupport user lifecycle management, including onboarding, access changes, provisioning, entitlement updates, and offboardingSupport and troubleshoot modern authentication technologies, including MFA, FIDO2, WebAuthn, Passkeys, YubiKey, TOTP/HOTP, Mobile Push, and Windows Hello for BusinessAdminister enterprise password management solutions, including Bitwarden and KeePassXC, with a focus on credential security, access controls, vaulting, and auditingTroubleshoot complex authentication issues, perform root-cause analysis, and support security investigationsDevelop and troubleshoot authentication integrations using Postman, REST APIs, Microsoft Graph API, and JSONSupport application teams with IAM, SSO, and authentication integration requirementsDevelop scripts and automation solutions using PowerShell, JavaScript, and/or Python to improve operational efficiencyMonitor authentication services, analyze logs, and create operational dashboards, KPIs, and reports using tools such as Splunk and Power BIContribute to authentication modernization, passwordless adoption, automation, and continuous service improvement initiativesCollaborate with cybersecurity, infrastructure, application, service desk, and business teams to resolve issues and deliver secure authentication solutions QUALIFICATIONS: Bachelor's or Master's degree in Computer Science, Information Security, Information Technology, or a related technical field10+ years of hands-on experience supporting, implementing, and troubleshooting Multifactor Authentication (MFA) solutions5+ years of experience with Microsoft Entra ID and NetIQ Advanced Authentication10+ years of experience delivering complex MFA and authentication projects in large enterprise environments10+ years of experience taking technical products or solutions from concept and design through implementation and successful deployment10+ years of experience working in structured enterprise IT environments and standardized project delivery methodologiesStrong experience working with non-functional requirements, security requirements, scalability, availability, and operational support considerations . REQUIRED SKILLS: Advanced to expert-level knowledge of NetIQ Advanced AuthenticationExpert knowledge of Multifactor Authentication (MFA) technologies and conceptsAdvanced knowledge of Microsoft Entra ID (Azure AD), including MFA, SSO, Conditional Access, Identity Governance, and user provisioningStrong knowledge of FIDO2, WebAuthn, Passkeys, HOTP, TOTP, YubiKey, and Windows Hello for BusinessExpert knowledge of authentication troubleshooting, debugging, root-cause analysis, and diagnostic methodsStrong knowledge of functional testing methodologies and test automationStrong understanding of Identity & Access Management (IAM) and enterprise securityAdvanced knowledge of password and credential management, including Bitwarden, KeePassXC, credential vaulting, and privileged credential handlingAdvanced knowledge of APIs and integrations, including Postman, REST APIs, Microsoft Graph API, and JSONAdvanced scripting and automation skills using PowerShell, JavaScript, and/or PythonStrong experience with Splunk, log analysis, monitoring, and troubleshootingAdvanced knowledge of Power BI for operational reporting and dashboardsStrong understanding of Windows operating systems and basic Linux/Unix administrationKnowledge of databases and query languages such as PostgreSQLStrong understanding of IT security and risk assessmentExcellent written, verbal, and presentation skills PREFERRED SKILLS: Experience with large-scale automotive or manufacturing IT environmentsExperience supporting enterprise authentication platforms across both cloud and on-premises environmentsExperience with Microsoft Azure and/or AWS security servicesExperience with Agile/Scrum development and project delivery methodologiesExperience developing authentication and IAM automation solutionsExperience with Microsoft Graph integrations and identity-related APIsExperience with AI-assisted automation, Microsoft Copilot, or similar productivity and development toolsExperience developing authentication-related dashboards, KPIs, and operational reportingIndustry certifications such as:CISSPSANS GIAC certifications, such as GSEC or GCWNMicrosoft Certified: Azure Security Engineer AssociateOther relevant IAM, cybersecurity, or cloud security certifications PHYSICAL REQUIREMENTS: Work is normally performed in an office, laboratory, manufacturing floor, or machine shop setting where physical work includes, but is not limited to sitting, standing, reaching, kneeling, bending, and lifting up to 25 lbsMust be able to understand and comply with all relevant safety practices FLSA STATUS/WORKING SCHEDULE: Location: 90% Spartanburg, SC, 10% other company locations Schedule: Full Time Assignment Start: ASAP DISCLAIMER: This job description is a high-level overview of general expectations of this position. It is not intended to list every responsibility of the position, nor does it represent an employment contract of any kind. SWJ TECHNOLOGY and all of its subsidiaries (i.e., SWJ MACHINING and ProjectOne US) are Equal Opportunity Employers and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender, disability status, protected veteran status, or any other characteristic protected by law. Powered by JazzHR 80FqECv62G