Job description

With a career at The Home Depot, you can be yourself and also be part of something bigger. Position Purpose: The Home Depot is looking to hire a Manager of Enterprise Authentication Security Engineering to lead the team that owns authentication for every employee, application, and workload. You will run the engineering organization behind our enterprise single sign-on platforms, centered on Microsoft Entra, and engineer cloud-native, reliably operated authentication services that support millions of authentications every day. This is a technical leadership role. You will set technical direction, coach engineers, and partner with security, infrastructure, and application teams to enable reliable and consistently performant authentication at scale. The ideal candidate combines deep authentication expertise with an engineering mindset: automation, continuous delivery, and operational rigor. What You ll Do Lead, mentor, and grow a team of authentication security engineers, setting clear goals and fostering a culture of ownership and continuous improvement. Own engineering and L3 operations for enterprise SSO platforms, both commercial and homegrown. Drive engineering practices that treat authentication as a production service: infrastructure as code, CI/CD pipelines, automated testing, and frequent, low-risk releases. Design and operate authentication services on cloud infrastructure with strong security, availability, and scalability characteristics. Partner with security architecture, infrastructure, application, and compliance teams to translate authentication standards (OIDC, OAuth 2.0, SAML) into secure, reusable solutions. Manage incidents and drive blameless post-incident reviews that lead to durable fixes. Communicate status, risks, and strategy to senior leadership and stakeholders. What You Bring Hands-on experience implementing and operating enterprise single sign-on with Microsoft Entra ID. Experience with DevOps practices and continuous release environments, including CI/CD pipelines, infrastructure as code, and automated deployment. Working knowledge of cloud infrastructure (Azure, AWS, or GCP) and how to build secure, resilient services on it. Software development experience: while you won t be writing code, you should have prior experience and be able to read and review it. Experience leading engineers or leading technical teams, with the ability to coach, set priorities, and deliver results through others. Strong understanding of authentication and authorization protocols and security fundamentals. Clear written and verbal communication, with the ability to work across technical and non-technical stakeholders. Track record of running large-scale transformations, including stakeholder alignment, phased rollout, and change management. Nice to Have Experience with PingFederate, including migrating from or running it alongside Entra. Experience applying SRE practices to authentication: SLOs and error budgets, observability, capacity planning, and automated recovery. Familiarity with workload identity and non-human identity (NHI) authentication. Experience with platform engineering to support large-scale application onboarding, such as self-service tooling, templates, and paved-road patterns. Experience designing offline authentication, including how users and systems authenticate when connectivity to the identity provider is limited or unavailable. Experience with identity verification (identity proofing), including integrating verification services and assurance levels into authentication flows. Key Responsibilities: 100% Deliver Execution, Plans & Aligns, Develop Others - Collaborate across teams to reduce vulnerabilities, risks and incident management; Drive execution of solution delivery; Guide teams in strategy, alignment, analysis and execution to ensure priorities objectives/deliverable are met; Provide leadership, mentoring and coaching to direct reports Direct Manager/Direct Reports: This position typically reports to Sr. Manager or Director This position has 6-10 Direct Reports Travel Requirements: No travel required. Physical Requirements: Most of the time is spent sitting in a comfortable position and there is frequent opportunity to move about. On rare occasions there may be a need to move or lift light articles. Working Conditions: Located in a comfortable indoor area. Any unpleasant conditions would be infrequent and not objectionable. Minimum Qualifications: Must be eighteen years of age or older. Must be legally permitted to work in the United States. Preferred Qualifications: 2 years of previous leadership experience Minimum Education: The knowledge, skills and abilities typically acquired through the completion of a bachelor s degree program or equivalent degree in a field of study related to the job. Minimum Years of Work Experience: 8 Competencies: Decision Quality Drives Engagement Develops Talent Manages Conflict For California, Colorado, Connecticut, Rhode Island, Nevada, New York City, Ithaca (NY), Westchester County (NY), and Washington residents: The pay range for this position is between $170,000.00 - $240,000.00

Requirements

Must-haves

With a career at The Home Depot, you can be yourself and also be part of something bigger.
What You ll Do
Lead, mentor, and grow a team of authentication security engineers, setting clear goals and fostering a culture of ownership and continuous improvement.
Own engineering and L3 operations for enterprise SSO platforms, both commercial and homegrown.
Drive engineering practices that treat authentication as a production service: infrastructure as code, CI/CD pipelines, automated testing, and frequent, low-risk releases.
Design and operate authentication services on cloud infrastructure with strong security, availability, and scalability characteristics.
Partner with security architecture, infrastructure, application, and compliance teams to translate authentication standards (OIDC, OAuth 2.0, SAML) into secure, reusable solutions.
Manage incidents and drive blameless post-incident reviews that lead to durable fixes.
Communicate status, risks, and strategy to senior leadership and stakeholders.
Hands-on experience implementing and operating enterprise single sign-on with Microsoft Entra ID.
Experience with DevOps practices and continuous release environments, including CI/CD pipelines, infrastructure as code, and automated deployment.
Working knowledge of cloud infrastructure (Azure, AWS, or GCP) and how to build secure, resilient services on it.
Software development experience: while you won t be writing code, you should have prior experience and be able to read and review it.
Experience leading engineers or leading technical teams, with the ability to coach, set priorities, and deliver results through others.
Strong understanding of authentication and authorization protocols and security fundamentals.
Clear written and verbal communication, with the ability to work across technical and non-technical stakeholders.
Track record of running large-scale transformations, including stakeholder alignment, phased rollout, and change management.
This position typically reports to Sr. Manager or Director

Nice-to-haves

Experience with PingFederate, including migrating from or running it alongside Entra.
Experience applying SRE practices to authentication: SLOs and error budgets, observability, capacity planning, and automated recovery.
Familiarity with workload identity and non-human identity (NHI) authentication.
Experience with platform engineering to support large-scale application onboarding, such as self-service tooling, templates, and paved-road patterns.
Experience designing offline authentication, including how users and systems authenticate when connectivity to the identity provider is limited or unavailable.
Experience with identity verification (identity proofing), including integrating verification services and assurance levels into authentication flows.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

ci/cdazureawsgcp

Platform: workday
Effort: long