lululemon

Staff Engineer- Identity and Access Management

WHO WE ARE:

lululemon is a yoga-inspired technical apparel company up to big things. The practice and philosophy of yoga informs our overall purpose to elevate the world through the power of practice. We are proud to be a growing global company with locations all around the world, from Vancouver to Shanghai, and places in between. We owe our success to our innovative product, our emphasis on our stores, our commitment to our people, and the incredible connections we get to make in every community we are in.

ABOUT THIS TEAM:

The lululemon Cybersecurity Identity and Access Management function enables IAM security controls required to support delivery of lululemon’s strategic objectives. We are searching for an experienced IAM Staff Engineer to join our Cybersecurity team. As the IAM Staff Engineer, you will be at the forefront of securing and governing our user access technical capabilities by designing IAM solutions that protect sensitive information while promoting productivity and collaboration within our teams. This role requires a balance of technical expertise, leadership and passion for security.

A DAY IN THE LIFE QUALIFICATIONS:

•  Lead the design and deployment of scalable IAM solutions that align with our security policies and facilitate efficient ways of working. 
• Implement and manage authentication and authorization processes including SSO, MFA, and PAM systems. 
• Develop, monitor, and enforce IAM processes. 
• Partner with technology teams and business leaders to IAM control designs are understood, prioritized, and implemented. Drive continuous improvement cycles to further enhance our IAM program roadmap. 
• Lead incident response for IAM related issues ensuring swift resolution and communication, and future prevention. 
• Stay ahead of IAM trends, advising on how emerging technologies. 
• Ensure platforms are hardened in alignment with security policies and best practices. 
• Bachelor’s degree or equivalent, and 10+ years of combined hands-on IAM technology engineering and cybersecurity engineering. 
• Strong security acumen, balanced by keen understanding of the need for business flexibility and agility. 
• Proven experience and expertise implementing and managing MFA, SSO and PAM solutions at an enterprise scale. 
• Deep experience with IAM technologies such as Sailpoint IIQ, EntraID, Active Directory, password vaulting tools, privileged access management tools, etc. 
• Solid experience with cloud platforms and integrating IAM cloud-based applications and services. 
• Deep experience with complex system troubleshooting and problem-solving skills. • Ability to manage, support, and deliver in a fast-paced environment. 
• Strong ability to build healthy relationships across teams and with stakeholders.

MUST HAVES:

• Acknowledges the presence of choice in every moment and takes personal responsibility for their life.
• Possesses an entrepreneurial spirit and continuously innovates to achieve great results.
• Communicates with honesty and kindness, and creates the space for others to do the same.
•  Leads with courage, knowing the possibility of greatness is bigger than the fear of failure.
•  Fosters connection by putting people first and building trusting relationships.
• Integrates fun and joy as a way of being and working, aka doesn’t take themselves too seriously.

Compensation and Benefits Package 

lululemon’s compensation offerings are grounded in a pay-for-performance philosophy that recognizes exceptional individual and team performance. The typical hiring range for this position is from  annually$164,000-205,000; the base pay offered is based on market location and may vary depending on job-related knowledge, skills, experience, and internal equity. As part of our total rewards offering, permanent employees in this position may be eligible for our competitive annual bonus program, subject to program eligibility requirements.  

At lululemon, investing in our people is a top priority. We believe that when life works, work works. We strive to be the place where inclusive leaders come to develop and enable all to be well. Recognizing our teams for their performance and dedication, other components of our total rewards offerings include support of career development, wellbeing, and personal growth:

• Extended health and dental benefits, and mental health plans 
• Paid time off 
• Savings and retirement plan matching 
• Generous employee discount
• Fitness & yoga classes 
• Parenthood top-up 
• Extensive catalog of development course offerings 
• People networks, mentorship programs, and leadership series (to name a few) 

Note: The incentive programs, benefits, and perks have certain eligibility requirements. The Company reserves the right to alter these incentive programs, benefits, and perks in whole or in part at any time without advance notice.

Workplace arrangement

This role is classified as Hybrid under our SSC Workplace Policy:  

Hybrid

In-person collaboration is important, and much of the role can be performed remotely. Work is performed onsite at least 3 days per week.