IT Authentication Architect

At-a-Glance:
Join an international automotive company as an IT Authentication Architect, focusing on enterprise authentication and credential management platforms.

Position Type:

• Contract
• Hybrid (3 Days WFH and 2 days per week in the office)
• Relocation candidates may be considered with a specific relocation plan.

Required:

• Previous automotive manufacturing or BMW experience.
• Bachelor's or Master's degree in Computer Science, Information Security, or a related technical field.
• 10 years of hands-on experience with MFA enablement, support, and troubleshooting.
• 5 years of experience in Entra ID, OpenText NetIQ Advanced Authentication.
• 10 years of successfully delivering complex MFA projects in large-scale enterprise environments.
• 10 years of experience driving products from concept and ideation through successful launch.
• 10 years of experience working on a team employing standardized project delivery methods (Agile/Scrum development methods preferred).
• 10 years of experience in understanding and working with non-functional requirements.
• 10 years of experience working in an enterprise environment.
• Relevant industry certifications (or equivalents) such as CISSP, SANS GIAC (e.g., GSEC, GCWN), or Microsoft Certified: Azure Security Engineer Associate (preferred).
• Expert skills in MS Office (Word, Excel, PowerPoint, Outlook, SharePoint, Access).
• Expert skills in professional communication (written, verbal, and presentation).
• Advanced proficiency in NetIQ Advanced Authentication.
• Expert knowledge of testing methodologies and tools, including test automation.
• Expert knowledge of root cause analysis, debugging methods, and diagnostic tools.
• Advanced knowledge of databases and query language (e.g., PSQL).
• Expert knowledge of modern operating systems (especially but not limited to MS Windows and Unix/Linux derivatives).
• Expert knowledge of IT Security and risk assessment.
• Expert knowledge of Multifactor Authentication including HOTP, mobile push, TOTP, and FIDO2 passkeys.
• Advanced knowledge of Identity & Access Management (Microsoft Entra ID (Azure AD), Multifactor Authentication (MFA), Single Sign-On (SSO), Conditional Access, Identity Governance, and/or User Provisioning & Administration).
• Advanced knowledge of Authentication Technologies (FIDO2, WebAuthn, Passkeys, HOTP, TOTP, YubiKey, Windows Hello for Business, and/or NetIQ Advanced Authentication).
• Advanced knowledge of Password Management (Bitwarden, KeePassXC, Credential management concepts, and/or Privileged credential handling).
• Advanced knowledge of API & Development (Postman, REST APIs, Microsoft Graph API, and/or JSON).
• Advanced skills in Basic scripting and development (PowerShell, JavaScript, and/or Python (preferred)).
• Advanced knowledge of Monitoring & Reporting (Splunk, Power BI, and/or Log analysis and troubleshooting).
• Advanced knowledge of Operating Systems (Windows and/or Basic Linux administration).

Preferred:

• Bachelor's degree or equivalent relevant experience.

Responsibilities:

• Operate, administer, support, and evolve enterprise authentication and credential management platforms.
• Focus on 3rd-level support, user administration, troubleshooting, integration, and continuous improvement of identity and access management solutions, password management platforms, multifactor authentication technologies, and passkey-based authentication.
• Work closely with security, infrastructure, application teams, and business stakeholders to ensure secure, scalable, and user-friendly authentication experiences across cloud and on-premises environments.
• Provide Level 3 support for enterprise identity and authentication services.
• Troubleshoot complex authentication, authorization, and credential-related issues.
• Administer and support Microsoft Entra ID, authentication platforms, and directory-integrated services.
• Manage user lifecycle processes including onboarding, access modifications, entitlement updates, and offboarding.
• Support passwordless and multifactor authentication solutions.
• Investigate authentication incidents and perform root-cause analysis.
• Work with service desk and Level 2 teams to resolve escalated issues.
• Administer, support, and troubleshoot enterprise password management solutions including Bitwarden & KeePassXC.
• Support password vaulting, credential sharing, access controls, auditing, and governance.
• Assist with adoption of secure credential management practices across business and technical teams.
• Support and implement authentication technologies including Microsoft Entra ID Authentication, NetIQ Advanced Authentication, YubiKey, Passkeys, FIDO2, WebAuthn, HOTP, TOTP, Mobile Push Authentication, & Windows Hello for Business.
• Assist with deployment, registration, troubleshooting, and user support for strong authentication solutions.
• Participate in the design and rollout of modern passwordless authentication strategies.
• Develop, test, and troubleshoot APIs using Postman, REST APIs, Graph APIs, & JSON-based integrations.
• Support integration of identity platforms with internal and external applications.
• Create and maintain automation scripts and small development components.
• Assist application teams with authentication and SSO integration requirements.
• Monitor authentication systems for operational health and security events.
• Support security investigations involving authentication, access management, and credential usage.
• Create dashboards, reports, and operational metrics.
• Perform log analysis using Splunk, Microsoft security tools, & other monitoring platforms.
• Build operational and security reporting using Power BI & Splunk.
• Produce KPIs and trend analyses related to authentication services and user administration.
• Identify opportunities to automate repetitive support and administration tasks.
• Leverage Microsoft Copilot and AI-based tools to improve operational efficiency and user experience.
• Develop AI-assisted workflows, automation solutions, documentation, and support processes.
• Contribute to continuous service improvement initiatives.
• Perform other duties as assigned by Group Operations Supervisor.

If your background aligns with what we’re looking for, you may receive a call from Ava, our virtual recruiter, for a brief screening conversation. Ava will ask a few questions about your experience and interest in the opportunity.

#LI-VK1
#HbM6349