Lead, Digital Identity Engineering

Job Description

About Estée Lauder Companies

The Estée Lauder Companies is the global leader in prestige beauty — delighting consumers with transformative products and experiences, inspiring them to express their individual beauty. We are the only company focused solely on prestige makeup, skincare, fragrance, and hair care with a diverse portfolio of 25+ brands sold in approximately 150 countries and territories. Infused throughout our organization is a passion for creativity and imagination — a desire to push the boundaries and invent the unexpected — as we continue the bold work of our founder Estée Lauder.
Who We Are

Do you want to be part of the team catalyzing digital innovation, harnessing the power of data, and transforming the fabric of security across the world’s most prestigious beauty, skincare, and luxury fragrance brands? Then join the information security and technology team, Enterprise Cybersecurity & Risk (ECR) at Estée Lauder Companies (ELC). ECR’s security team fuels cyber defense, technology excellence, risk and compliance, and global resilience. We stay at the forefront of cyber threats to deliver fit-for-purpose tools, technologies, and processes that protect ELC’s business operations and empower secure strategic growth. We shape and maintain a secure and scalable cybersecurity infrastructure. Effective collaboration with stakeholders to design architectural solutions, assess emerging technologies, and align security architecture with organizational goals is our core responsibility. If you thrive in change-rich entrepreneurial environments, then this is the team for you. From our fast-paced delivery plans to our global team expansion, this is an exciting time to join us!

What You’ll Do

The Lead Digital Identity Engineer will join a team of Engineers, Product Owners, and Enterprise & Security Architects in the IAM space for Estee Lauder Companies. This position will include hands-on engineering and development of IAM solutions as well as integration/support vendor products related to IAM.

An ideal candidate will have strong engineering skills as well as the ability to help manage a suite of products through Continuous Improvement/Continuous Development strategies.

The Lead Digital Identity Engineer will also serve as a technical and design advisor for new applications integrated into ELC’s Digital IAM landscape for Life Cycle Management (LCM), Identity Governance, and Single Sign-On (SSO), as well as provide direct oversight of service providers to ensure the integrity of the implemented design.

This role necessarily deals with highly confidential and sensitive information, and the role is expected to adhere to best handling practices. This is a hands-on core engineer position and with their strong domain knowledge of Identity and Access Management technologies, the candidate is expected to self-lead their deliverables and contribute towards the success of ELC’s Digital Identity Program.

You will be responsible for:

• Participation in new business initiatives and be responsible for deploying business-focused IAM solutions adhering to ELC Policies & standards.
• Lead engineer to support delivery of strategic IAM initiatives and solutions, including analysis, design, and implementation, to improve security posture.
• Manage user journeys, document, implement, and manage an enterprise-wide IAM framework, strategy, and roadmap that outlines and defines the tactical, operational, and strategic plans for IAM.
• Lead discussions and collect requirements from various regions and implement integrations in alignment with global platform design
• Responsible for working with vendor partners, security & enterprise architecture, and business stakeholders to enable and integrate applications.
• Lead engineer for efforts to perform security implementation, version upgrades, and rollouts, including user administration, and role administration.
• Meet project budget, scope, schedule, and quality goals. Make major contributions to ensure deliverables meet objectives.
• Provide sustenance to mobile applications in IOS, Android & Chrome web Stores.
• Maintain a high level of personal integrity, including the ability to professionally handle confidential matters by executing the appropriate level of judgment and maturity.
• Handle competing priorities, seeking consensus when stakeholders have different/contradicting opinions.
• Independently create written deliverables and participate in presentations.
• Mentors guide other team members.

Who You Are

• You have 10+ years of Information Technology experience, with at least 5+ years of working experience in modern authentication and authorization paradigms such as Digital identity & access management, Identity Federation, multi-factor authentication, single sign-on, risk-based authentication, Identity governance, and password management.
• Excellent track record and proven ability to produce effective, innovative solutions on an enterprise scale. Constantly evaluating the evolving IT industry to be on top of the latest innovations in IT and performing fit-analysis of new technologies, sharing the same with key stakeholders.
• Self-starting and independently completing complex security-related tasks and working within global teams. IAM domain knowledge with adequate experience integrating identity repositories such as LDAP, Active Directory, and Azure AD.
• Expertise with B2B enterprise IAM and IGA use cases including Joiner, Mover, Leavers, Access Review, Certification, Identity proofing, vetting, etc.
• Strong oral and written communication skills, influence/negotiation skills, analytical skills, and conflict management experience.
• Ability to problem-solve, think creatively, ability to work under pressure, meet strict deadlines, challenge the status quo, and manage ambiguity.
• Ability to work during evenings or on weekends to support special tasks or projects.
• Adaptability to work in a global culture that includes a 24/7 support model.
• Experience with IT project management concepts and reporting.
• Proficient (oral and written) in English as a business language.
• Experience handling, securing, and communicating highly confidential and sensitive information.