IT Authentication Architect

At-a-Glance Join an international automotive company as an IT Authentication Architect, focusing on enterprise authentication and credential management platforms. Position Type Contract Hybrid (3 Days WFH and 2 days per week in the office) Relocation candidates may be considered with a specific relocation plan. Required Previous automotive manufacturing or BMW experience. Bachelor's or Master's degree in Computer Science, Information Security, or a related technical field. 10 years of hands‑on experience with MFA enablement, support, and troubleshooting. 5 years of experience in Entra ID, OpenText NetIQ Advanced Authentication. 10 years of successfully delivering complex MFA projects in large‑scale enterprise environments. 10 years of experience driving products from concept and ideation through successful launch. 10 years of experience working on a team employing standardized project delivery methods (Agile/Scrum development methods preferred). 10 years of experience in understanding and working with non‑functional requirements. 10 years of experience working in an enterprise environment. Relevant industry certifications (or equivalents) such as CISSP, SANS GIAC (e.g., GSEC, GCWN), or Microsoft Certified: Azure Security Engineer Associate (preferred). Expert skills in MS Office (Word, Excel, PowerPoint, Outlook, SharePoint, Access). Expert skills in professional communication (written, verbal, and presentation). Advanced proficiency in NetIQ Advanced Authentication. Expert knowledge of testing methodologies and tools, including test automation. Expert knowledge of root cause analysis, debugging methods, and diagnostic tools. Advanced knowledge of databases and query language (e.g., PSQL). Expert knowledge of modern operating systems (especially but not limited to MS Windows and Unix/Linux derivatives). Expert knowledge of IT Security and risk assessment. Expert knowledge of Multifactor Authentication including HOTP, mobile push, TOTP, and FIDO2 passkeys. Advanced knowledge of Identity & Access Management (Microsoft Entra ID (Azure AD), Multifactor Authentication (MFA), Single Sign-On (SSO), Conditional Access, Identity Governance, and/or User Provisioning & Administration). Advanced knowledge of Authentication Technologies (FIDO2, WebAuthn, Passkeys, HOTP, TOTP, YubiKey, Windows Hello for Business, and/or NetIQ Advanced Authentication). Advanced knowledge of Password Management (Bitwarden, KeePassXC, Credential management concepts, and/or Privileged credential handling). Advanced knowledge of API & Development (Postman, REST APIs, Microsoft Graph API, and/or JSON). Advanced skills in Basic scripting and development (PowerShell, JavaScript, and/or Python (preferred)). Advanced knowledge of Monitoring & Reporting (Splunk, Power BI, and/or Log analysis and troubleshooting). Advanced knowledge of Operating Systems (Windows and/or Basic Linux administration). Preferred Bachelor's degree or equivalent relevant experience. Responsibilities Operate, administer, support, and evolve enterprise authentication and credential management platforms. Focus on 3rd-level support, user administration, troubleshooting, integration, and continuous improvement of identity and access management solutions, password management platforms, multifactor authentication technologies, and passkey‑based authentication. Work closely with security, infrastructure, application teams, and business stakeholders to ensure secure, scalable, and user‑friendly authentication experiences across cloud and on‑premises environments. Provide Level 3 support for enterprise identity and authentication services. Troubleshoot complex authentication, authorization, and credential‑related issues. Administer and support Microsoft Entra ID, authentication platforms, and directory‑integrated services. Manage user lifecycle processes including onboarding, access modifications, entitlement updates, and offboarding. Support passwordless and multifactor authentication solutions. Investigate authentication incidents and perform root‑cause analysis. Work with service desk and Level 2 teams to resolve escalated issues. Administer, support, and troubleshoot enterprise password management solutions including Bitwarden & KeePassXC. Support password vaulting, credential sharing, access controls, auditing, and governance. Assist with adoption of secure credential management practices across business and technical teams. Support and implement authentication technologies including Microsoft Entra ID Authentication, NetIQ Advanced Authentication, YubiKey, Passkeys, FIDO2, WebAuthn, HOTP, TOTP, Mobile Push Authentication, & Windows Hello for Business. Assist with deployment, registration, troubleshooting, and user support for strong authentication solutions. Participate in the design and rollout of modern passwordless authentication strategies. Develop, test, and troubleshoot APIs using Postman, REST APIs, Graph APIs, & JSON‑based integrations. Support integration of identity platforms with internal and external applications. Create and maintain automation scripts and small development components. Assist application teams with authentication and SSO integration requirements. Monitor authentication systems for operational health and security events. Support security investigations involving authentication, access management, and credential usage. Create dashboards, reports, and operational metrics. Perform log analysis using Splunk, Microsoft security tools, & other monitoring platforms. Build operational and security reporting using Power BI & Splunk. Produce KPIs and trend analyses related to authentication services and user administration. Identify opportunities to automate repetitive support and administration tasks. Leverage Microsoft Copilot and AI‑based tools to improve operational efficiency and user experience. Develop AI‑assisted workflows, automation solutions, documentation, and support processes. Contribute to continuous service improvement initiatives. Perform other duties as assigned by Group Operations Supervisor. If your background aligns with what we’re looking for, you may receive a call from Ava, our virtual recruiter, for a brief screening conversation. Ava will ask a few questions about your experience and interest in the opportunity.

• HbM6349
• J-18808-Ljbffr Hired by Matrix