IAM Systems Engineer

Who we are

lululemon is an innovative performance apparel company for yoga, running, training, and other

athletic pursuits. Setting the bar in technical fabrics and functional design, we create transformational

products and experiences that support people in moving, growing, connecting, and being well. We

owe our success to our innovative product, emphasis on stores, commitment to our people, and the

incredible connections we make in every community we're in. As a company, we focus on creating

positive change to build a healthier, thriving future. In particular, that includes creating an equitable,

inclusive and growth-focused environment for our people.

About this team

The lululemon Identity and Access Management (IAM) team within Cybersecurity, provides services for

the global enterprise. We seek out efficiencies and innovation in order to facilitate rapid change,

scalability, and maturity of core security services for the modernizing lululemon environment. The IAM

portfolio encompasses the planning, design, implementation, maintenance, support, and continuous

improvement of identity and access services. We are currently searching for an engineer, who is a

security-minded subject matter expert of building and maintaining global enterprise-scale services

such as; Single Sign-On (SSO), Federation and Multi-Factor Authentication (MFA).

A day in the life:

Our Identity and Access services play an important role in the organization. Providing a great user

experience, supporting resilient scalable services, while providing fundamental security enforcement,

must be top of mind.

• Support project efforts through building modernized IAM capabilities utilizing standardized

frameworks to foster sustainability and growth

• Identify technical and process gaps, foster technical collaboration, stay up-to-date with trends
• Build, enhance and mature identity and access technologies and controls that leverage best

practices, aligned to governance controls, and establish solid scalable foundations

• Implement technology workflows and rules to maintain accuracy of data to managed systems
• Provide stellar end-user support with on-going operations tasks, enhancements, and bug fixes
• Maintain and upgrades systems, processes, and other necessary support as part of continuous

improvement model

• Collaborate closely with application teams to establish self-service, automation, least privileged

access and promote adoption

• Collaborate closely with global IAM team members, cybersecurity, infrastructure, digital and

other technology teams to ensure appropriate business resiliency, end-to-end data integrity,

GRC (governance, risk, compliance) enforcement controls, and security requirements

Qualifications:

• 4+ years hands-on project and operations experience, including implementation, maintenance,

and maturing enterprise cloud infrastructure and cloud authentication solutions

• 4+ years maturing cybersecurity and/or infrastructure solutions
• 3+ years of deep technical experience with Azure AD Global or similar SSO,

Federation, and MFA solutions at B2E, B2B and/or B2C scale

Phase One - Before Engaging with Candidate

Job Description

One Candidate Experience Talent Acquisition 2017

• 3+ years of experience with authentication solutions, such as Active Directory and/or other

LDAP technologies

• 2+ years of experience with Azure IaaS and/or AWS IaaS solutions is preferred
• Experience supporting global regulatory compliant solutions is preferred
• Familiarity with Azure AD China and/or other China IDaaS solutions is a plus
• Expert in SAML 2.0, OAuth 2.0, OIDC, JWT, SCIM, LDAP/S, Kerberos protocols
• Expert in network security support and analysis tactics
• Expert in 2 or more coding languages PowerShell, C+, SQL, Python, JavaScript

and/or others

• Experience working with Privilege Identity/Access Management (PIM/PAM) solutions is a plus
• Experience working with Microsoft CA and/or PKI solutions is a plus
• Broad knowledge of DEVOPS processes and best practices
• Collaborative team player, who will work closely with IAM and other teams
• Excellent interpersonal, written and verbal skills with an ability to express technical concepts in

business terms

• Great technical and system documentation skills

Terms & Conditions for Candidate Portal

Last Updated: May 6th, 2026

Please read these Terms & Conditions ("Agreement", "Terms") carefully before using the Candidate Portal ("Portal", "Service") provided by AKT Corp ("we", "us", "our").

By accessing or registering for the Portal, you ("Candidate", "User", "you", "your") agree to be bound by these Terms.

If you do not agree with any part of these Terms, you may not use the Portal.

1. Acceptance of Terms

By accessing or using the Candidate Portal, you affirm that you are at least 18 years old and are legally authorized to enter into this Agreement.

If you are accessing the Portal on behalf of an employer or third party, you represent that you have the authority to bind that entity to these Terms.

2. Purpose of Portal

The Portal is provided as a digital platform for Candidates to:

• Create and manage profiles
• Upload resumes, documents, and other professional details
• View and apply for job opportunities
• Track application status
• Communicate with recruiters and client organizations
• Access profile and document-related information

These Terms govern your use of the Portal and all related services.

3. User Registration & Account Security

• You agree to provide accurate, complete, and current information during signup.
• You are responsible for maintaining the confidentiality of your account credentials.
• You agree to immediately notify us of any unauthorized use of your account.
• You are responsible for all activities that occur under your account.

4. Document Upload & Verification

You understand and agree that:

• All resumes, documents, and information you upload must be true, accurate, and valid
• You are fully responsible for the accuracy and legality of the information you provide
• The Portal may use third-party verification services where applicable
• We reserve the right to reject or remove any document or information that appears invalid or misleading

5. Use of Portal Services

You agree to use the Portal in compliance with:

• Applicable laws and regulations
• Professional standards for IT professionals
• Client-specific requirements
• Instructions provided on the Portal

Prohibited actions include, but are not limited to:

• Uploading false or misleading information
• Interfering with Portal operations
• Sharing your credentials or login with others
• Attempting to bypass or manipulate application processes

6. Job Application

You acknowledge that:

• Job opportunities displayed on the Portal are not guaranteed of employment.
• Applications are subject to client requirements, screening, and approval.
• Job details (role, location, requirements) are subject to change.

7. Profile Accuracy & Updates

• You agree to maintain accurate and up-to-date information in your profile.
• Failure to keep your profile updated may impact your eligibility for job opportunities or result in account restrictions.

8. Privacy & Data Use

Your use of the Portal is subject to our Privacy Policy, which describes how we collect, use, and safeguard your personal information.

By using the Portal, you consent to the collection and use of information as described.

9. Intellectual Property

All intellectual property contained in or presented through the Portal is owned by us or our licensors.

You may not copy, modify, distribute, or otherwise use any Portal content without express written permission.

10. Disclaimer of Warranties

The Portal and all content and services are provided "as is" and "as available."

We make no warranties, express or implied, including:

• Merchantability
• Fitness for a particular purpose
• Accuracy or completeness of information

11. Limitation of Liability

To the fullest extent permitted by law, we are not liable for:

• Direct, indirect, incidental, special, or consequential damages
• Loss of data, profits, or business opportunities
• Claims arising from job application outcomes

12. Amendments

We may modify these Terms at any time.

Changes will be posted on the Portal with an updated "Last Updated" date.

Your continued use of the Portal after changes indicates your acceptance.

13. Termination

We may suspend or terminate your access to the Portal if you violate these Terms or for any reason, with or without notice.

MFA, Azure AD Global or similar SSO, B2E, B2B and/or B2C scale, SSO, MFA