IT Authentication Architect

About the role

This role is responsible for the operation, administration, support, and evolution of enterprise authentication and credential management platforms. The role focuses on 3rd-level support, user administration, troubleshooting, integration, and continuous improvement of identity and access management solutions, password management platforms, multifactor authentication technologies, and passkey-based authentication. The position works closely with security, infrastructure, application teams, and business stakeholders to ensure secure, scalable, and user-friendly authentication experiences across cloud and on-premises environments.

Responsibilities

• Provides Level 3 support for enterprise identity and authentication services.
• Troubleshoots complex authentication, authorization, and credential-related issues.
• Administers and supports Microsoft Entra ID, authentication platforms, and directory-integrated services.
• Manages user lifecycle processes including onboarding, access modifications, entitlement updates, and offboarding.
• Supports passwordless and multifactor authentication solutions.
• Investigates authentication incidents and performs root-cause analysis.
• Works with service desk and Level 2 teams to resolve escalated issues.
• Administers, supports, and troubleshoots enterprise password management solutions including Bitwarden & KeePassXC.
• Supports password vaulting, credential sharing, access controls, auditing, and governance.
• Assists with adoption of secure credential management practices across business and technical teams.
• Supports and implements authentication technologies including Microsoft Entra ID Authentication, NetIQ Advanced Authentication, YubiKey, Passkeys, FIDO2, WebAuthn, HOTP, TOTP, Mobile Push Authentication, & Windows Hello for Business.
• Assists with deployment, registration, troubleshooting, and user support for strong authentication solutions.
• Participates in the design and rollout of modern passwordless authentication strategies.
• Develops, tests, and troubleshoots APIs using Postman, REST APIs, Graph APIs, & JSON-based integrations.
• Supports integration of identity platforms with internal and external applications.
• Creates and maintains automation scripts and small development components.
• Assists application teams with authentication and SSO integration requirements.
• Monitors authentication systems for operational health and security events.
• Supports security investigations involving authentication, access management, and credential usage.
• Creates dashboards, reports, and operational metrics.
• Performs log analysis using Splunk, Microsoft security tools, & other monitoring platforms.
• Builds operational and security reporting using Power BI & Splunk.
• Produces KPIs and trend analyses related to authentication services and user administration.
• Identifies opportunities to automate repetitive support and administration tasks.
• Leverages Microsoft Copilot and AI-based tools to improve operational efficiency and user experience.
• Develops AI-assisted workflows, automation solutions, documentation, and support processes.
• Contributes to continuous service improvement initiatives.
• Performs other duties as assigned by Group Operations Supervisor.

Requirements

Education

• Bachelor's or Master's degree in Computer Science, Information Security, or a related technical field.

Experience

• 10+ years of hands-on experience with MFA enablement, support and troubleshooting.
• 5+ years of experience in Entra ID, OpenText NetIQ Advanced Authentication.
• 10+ years of successfully delivering complex MFA projects in large-scale enterprise environments.
• 10+ years of experience driving products from concept and ideation through successful launch.
• 10+ years of experience working on a team employing standardized project delivery methods (Agile/Scrum development methods preferred).
• 10+ years of experience in understanding and working with non-functional requirements.
• 10+ years of experience working in an enterprise environment.

Training

• Trainings and self-developments in the field of MFA, IAM, Entra ID, Azure, AWS as applicable, per training guidelines.

Certifications

• Relevant industry certifications (or equivalents) such as CISSP, SANS GIAC (e.g., GSEC, GCWN), or Microsoft Certified: Azure Security Engineer Associate (preferred).

Knowledge, Skills & Abilities

• Expert skills in MS Office (Word, Excel, PowerPoint, Outlook, SharePoint, Access).
• Expert skills in professional communication (written, verbal and presentation).
• Advanced proficiency in NetIQ Advanced Authentication.
• Expert knowledge of (functional) testing methodologies and tools, including test automation.
• Expert knowledge of root cause analysis, debugging methods, and diagnostic tools.
• Advanced knowledge of Databases and query language (e.g., PSQL).
• Expert knowledge of modern operating systems (especially but not limited to MS Windows).

Benefits

• Health Insurance: Medical, dental, and vision coverage
• Retirement Plans: Participation in a company-sponsored retirement savings plan
• Legal Service Plans: Offering access to attorneys for legal advice and representation

Pay

$52.31/hr - $71.93/hr on W2

Schedule

Duration: 12+ months contract. Location: Greenville, SC 29607.