As the leader in automotive preventive maintenance, Valvoline has a proven track record of growth. We continue to invest in our people, processes, and technology to strengthen our ability to efficiently deliver Quick, Easy, Trusted service across all our stores - every day. We're not just in the car business; we're in the people business. And we're looking for humble, hungry, and smart people to help us shape the future of mobility. If you're hungry to drive change and seek a dynamic, collaborative environment that fuels both personal and professional growth, you've found your place with us.
Our highest priority is creating a welcoming workplace with team members from a wide variety of diverse backgrounds and experiences.
The Opportunity
Valvoline has a rewarding opportunity as an Identity and Access Management (IDAM) Architect. In this role, you will be responsible for the overall architecture, design and solutioning of IDAM platforms along with IDAM related integrations with other enterprise systems and platforms. The IDAM Architect collaborates with other cross functional areas (development, infrastructure, application solutions, business, and other IT groups) to develop, deploy, administer, and support IDAM capabilities for all critical applications and systems within the organization.
How You'll Make a Difference
Facilitate architectural design and solutioning of IDAM platforms that also includes technical design documents. Evaluate and recommend best IDAM solution to the organization based upon business requirements and services provided.
Lead IDAM integration efforts and collaborate with various stakeholders on integrating IDAM capabilities based upon application requirements as it relates to identity.
Engage stakeholders on capabilities and optimization relating to IDAM architecture. Gather, analyze, and assess business requirements relating to IDAM.
Promote and enable best practices relating to IDAM security and communicate throughout the organization. Document policies and procedures relating to these best practices. Review current policies and processes and provide recommendations on improvement.
Assess opportunities on enabling IDAM capabilities on applications and platforms not managed by IT within the organization.
Design, develop, and implement solutions relating to ID (workplace, B2B, B2C) life-cycle management, workflow processes for access control and role-based security, and privilege account management.
Design, develop, and implement solution strategies on access controls relating to privilege/elevated user accounts (Privilege Access Management).
Other duties and responsibilities as determined by Valvoline from time to time in its sole discretion.
What You'll Need to Succeed
Bachelor's degree in IT, engineering, business, management or a related field, or equivalent work experience
Minimum of 10 years of overall IT experience
Minimum of seven years of experience in the IDAM space
Minimum of four years of experience in equivalent IDM solutions (e.g. Sailpoint, Forgerock/Ping Identity, Oracle, Okta, One Identity, EntraID etc.)
Minimum of four years of experience in equivalent PAM solutions (e.g. CyberArk, Hashicorp, BeyondTrust, Delinea)
Minimum of two years of managing architectural tasks within the IDAM space
Minimum of two years of Identity experience working for a retail organization
Experience in Project Management
Experience in architectural design and implementation
Hands on experience in administrating IDM solutions
Experience in Windows Active Directory, Azure, Apache, Tomcat, UNIX, Linux, Tivoli LDAP, AWS
Experience in Privilege Access Management Platforms
Experienced in scripting or programming languages: PowerShell, UNIX Shell, Python, Java. Collaboration ability with key stakeholders, both business and IT
Strong communication skills, both oral and written. Experience in technical documentation
Experience in developing solutions relating to RBAC (Role-based Access Control)
Knowledge of software solutions and/or web services as it relates to development, scripting, programming, design, testing, and production deployment
Strong understanding and hands on experience in OAuth, OIDC, SAML
Hands on experience with SSL certificate management (AWS, Entrust, Microsoft)
Must be authorized to work in the U.S.
We Take Care of the WHOLE You
Health insurance plans (medical, dental, vision)
HSA and flexible spending accounts
401(k)
Incentive opportunity*
Life insurance
Short and long-term disability insurance
Paid vacation and holidays*
Employee Assistance Program
Valvoline Instant Oil Change discounts
Tuition reimbursement*
Adoption assistance*
*Terms and conditions apply, and benefits may differ depending on position.