IT Authentication Architect

As IT Authentication Architect you will be responsible for the operation, administration, support, and evolution of enterprise authentication and credential management platforms. The role focuses on 3rd-level support, user administration, troubleshooting, integration, and continuous improvement of identity and access management solutions, password management platforms, multifactor authentication technologies, and passkey-based authentication. The position works closely with security, infrastructure, application teams, and business stakeholders to ensure secure, scalable, and user-friendly authentication experiences across cloud and on-premises environments.

This role is located with our client in the Greenville, SC area.

Responsibilities:

• Provides Level 3 support for enterprise identity and authentication services.
• Troubleshoots complex authentication, authorization, and credential-related issues.
• Administers and supports Microsoft Entra ID, authentication platforms, and directory-integrated services.
• Manages user lifecycle processes including onboarding, access modifications, entitlement updates, and offboarding.
• Supports passwordless and multifactor authentication solutions.
• Investigates authentication incidents and perform root-cause analysis.
• Works with service desk and Level 2 teams to resolve escalated issues.
• Administers, supports, and troubleshoots enterprise password management solutions including Bitwarden & KeePassXC.
• Supports password vaulting, credential sharing, access controls, auditing, and governance.
• Assists with adoption of secure credential management practices across business and technical teams.
• Supports and implements authentication technologies including Microsoft Entra ID Authentication, NetIQ Advanced Authentication, YubiKey, Passkeys, FIDO2, WebAuthn, HOTP, TOTP, Mobile Push Authentication, & Windows Hello for Business.
• Assists with deployment, registration, troubleshooting, and user support for strong authentication solutions.
• Participates in the design and rollout of modern passwordless authentication strategies.
• Develops, tests, and troubleshoots APIs using Postman, REST APIs, Graph APIs, & JSON-based integrations.
• Supports integration of identity platforms with internal and external applications. Creates and maintains automation scripts and small development components.
• Assists application teams with authentication and SSO integration requirements. Monitors authentication systems for operational health and security events.
• Supports security investigations involving authentication, access management, and credential usage. Creates dashboards, reports, and operational metrics.
• Performs log analysis using Splunk, Microsoft security tools, & other monitoring platforms. Builds operational and security reporting using Power BI & Splunk.
• Produces KPIs and trend analyses related to authentication services and user administration. Identifies opportunities to automate repetitive support and administration tasks.
• Leverages Microsoft Copilot and AI-based tools to improve operational efficiency and user experience.
• Develops AI-assisted workflows, automation solutions, documentation, and support processes.
• Contributes to continuous service improvement initiatives.
• Performs other duties as assigned by Supervisor.

Requirements:

• Bachelor's or Master's degree in Computer Science, Information Security, or a related technical field.
• 10+ years of hands-on experience with MFA enablement, support and troubleshooting.
• 5+ years of experience in Entra ID, OpenText NetIQ Advanced Authentication.
• 10+ years of successfully delivering complex MFA projects in large-scale enterprise environments.
• 10+ years of experience driving products from concept and ideation through successful launch.
• 10+ years of experience working on a team employing standardized project delivery methods (Agile/Scrum development methods preferred).
• 10+ years of experience in understanding and working with non-functional requirements.
• 10+ years of experience of working in an enterprise environment.
• Trainings and self-developments in the field of MFA, IAM, Entra ID, Azure, AWS
• Relevant industry certifications (or equivalents) such as CISSP, SANS GIAC (e.g., GSEC, GCWN), or Microsoft Certified: Azure Security Engineer Associate (preferred).
• Expert skills in MS Office (Word, Excel, PowerPoint, Outlook, SharePoint, Access).
• Expert skills in professional communication (written, verbal and presentation).
• Advanced proficiency in NetIQ Advanced Authentication.
• Expert knowledge of (functional) testing methodologies and tools, including test automation.
• Expert knowledge of root cause analysis, debugging methods, and diagnostic tools.
• Advanced knowledge of Databases and query language (e.g., PSQL).
• Expert knowledge of modern operating systems (especially but not limited to MS Windows and Unix/Linux derivates).
• Expert knowledge of IT Security and risk assessment.
• Expert knowledge of Multifactor Authentication including HOTP, mobile push, TOTP and FIDO2 passkeys.
• Advanced knowledge of Identity & Access Management (Microsoft Entra ID (Azure AD), Multifactor Authentication (MFA), Single Sign-On (SSO), Conditional Access, Identity Governance, and/or User Provisioning & Administration).
• Advanced knowledge of Authentication Technologies (FIDO2, WebAuthn, Passkeys, HOTP, TOTP, YubiKey, Windows Hello for Business, and/or NetIQ Advanced Authentication).
• Advanced knowledge of Password Management (Bitwarden, KeePassXC, Credential management concepts, and/or Privileged credential handling).
• Advanced knowledge of API & Development (Postman, REST APIs, Microsoft Graph API, and/or JSON).
• Advanced skills in Basic scripting and development (PowerShell, JavaScript, and/or Python (preferred).
• Advanced knowledge of Monitoring & Reporting (Splunk, Power BI, and/or Log analysis and troubleshooting).
• Advanced knowledge of Operating Systems (Windows and/or Basic Linux administration).

What we offer

This position is for a long term renewable contract with an excellent hourly rate including benefits including but not limited to medical, dental, vision, FSA and 401k along with paid holidays and vacation days.

Please apply ONLY if you fulfill the above mentioned minimum requirements.

Job Type: Full-time

Work Location: Hybrid remote in Greenville, SC 29607