Acuity Inc. (NYSE: AYI) is a market-leading industrial technology company. We use technology to solve problems in spaces, light and more things to come. Through our two business segments, Acuity Brands Lighting (ABL) and Acuity Intelligent Spaces (AIS), we design, manufacture, and bring to market products and services that make a valuable difference in people’s lives.

We achieve growth through the development of innovative new products and services, including lighting, lighting controls, building management solutions, and an audio, video and control platform. We focus on customer outcomes and drive growth and productivity to increase market share and deliver superior returns. We look to aggressively deploy capital to grow the business and to enter attractive new verticals.

Acuity Inc. is based in Atlanta, Georgia, with operations across North America, Europe and Asia. The Company is powered by approximately 13,000 dedicated and talented associates. Visit us at www.acuityinc.com.

The Opportunity

At Acuity, we are building a modern, scalable Identity and Access Management (IAM) and Customer Identity and Access Management (CIAM) platform to support our growing portfolio of digital products and services.

This role will play a critical part in shaping and delivering our unified identity strategy, enabling secure, seamless authentication and authorization experiences for employees, customers, and partners.

You will work across both enterprise IAM and CIAM domains, leveraging industry leading platforms such as Microsoft Entra ID, Okta etc. and modern identity standards, while partnering with engineering, security, and product teams to drive standardization, scalability, and security-first design.

Key Tasks & Responsibilities (Essential Functions)

Architecture & Strategy

Define and evolve the IAM & CIAM architecture, aligned to Zero Trust and enterprise security principles
Design scalable authentication and authorization models across internal platforms and customer-facing applications
Establish standards, patterns, and reference architectures for identity services across the organization
Drive platform selection, integration strategy, and roadmap for identity capabilities

Identity Platform Engineering

- Lead design and implementation of identity solutions using industry leading technologies like Microsoft Entra ID, Okta, Auth0, Ping or any other Identity Providers (IdPs)
Build and maintain:
- Authentication flows (SSO, MFA, passwordless)
- Authorization models (RBAC / ABAC)
- Federation and identity brokering integrations
- B2B and B2C flows
Ensure scalable handling of user identities, tokens, sessions, and lifecycle management

CIAM (Customer Identity & Access)

Design and implement customer-facing identity services, including:
- Self-service registration and onboarding flows
- Customer lifecycle management and identity governance
- Secure access across multiple products and platforms
Enable consistent authentication and authorization across digital products
Drive improvements in user experience, security, and scalability for customer identity

Security & Compliance

Implement and enforce:
- MFA, adaptive authentication, and conditional access policies
- Identity governance, audit logging, and access reviews
Align identity systems with regulatory and compliance requirements (e.g., GDPR, data protection)

Integration & Enablement

Partner with engineering teams to integrate identity services into applications
Enable adoption through SDKs, APIs, documentation, and patterns
Act as an internal consultant and SME for identity across product and platform teams
Experience with public cloud ecosystems like Microsoft Azure (Preferred), GCP and AWS.
Any exposure to Kubernetes and related technologies is an advantage

Operational Excellence

Ensure identity platforms are:
- Highly available, scalable, and secure
- Monitored and observable
- Integrated into CI/CD and DevSecOps practices
Support continuous improvement of identity operations and automation

Skills and Minimum Experience Required

Bachelor's degree in computer science, engineering, or related field.
Minimum 8–12 years of overall experience in software engineering, security, or identity domains
Minimum 5+ years of hands-on experience in IAM and/or CIAM implementations across enterprise or customer-facing environments
Proven experience designing and delivering identity solutions at scale (multi-application, multi-tenant, or high-volume user environments)
Demonstrated experience working across both authentication (AuthN) and authorization (AuthZ) capabilities
Hands-on experience with, Microsoft external Entra ID (Azure AD, B2C), Okta or equivalent identity platforms
Deep understanding of:
- OAuth 2.0, OpenID Connect (OIDC), SAML
- Protocol-level JWT/OIDC (hands-on Entra ID (workforce)
- Identity federation and token-based authentication
- Zero Trust security principles
- Access governance and compliance frameworks
Experience designing RBAC / ABAC authorization models
Experience with externalized/fine-grained authorization (policy-as-code) using engines such as OPA, Cedar, or XACML, including PDP/PEP architecture, policy testing, and fail-closed design.
Experience with cloud platforms (Azure preferred; AWS or GCP acceptable)
Ability to operate at both architectural and hands-on engineering level
Excellent communication skills and the ability to influence across teams.
Strong understanding of Agile delivery frameworks.

Preferred Skills and Experience (Nice to Have)

Exposure to privacy, consent management, and customer data protection
Evolving identity systems to support AI-enabled platforms and services
Experience mentoring engineers or leading small identity teams
Understanding of customer identity UX patterns (frictionless login, conversion optimization, accessibility)
Experience designing or contributing to enterprise-scale CIAM platforms serving multiple products, business units, or regions
Experience enabling identity for AI, platform, or API ecosystems
Exposure to AI-driven security or identity use cases
Experience leveraging automation for:
- Identity lifecycle operations
- Policy enforcement and remediation
Experience with IAC tools like Terraform, Bicep & CI/CD pipelines (ADO, GitHub Actions)
DevSecOps practices and secure pipeline integration
Certifications like CISSP, Azure Solutions Architect Expert, or any vendor-specific certifications

We value diversity and are an equal opportunity employer.  All qualified applicants will be considered for employment without regards to race, color, age, gender, sexual orientation, gender identity and expression, ethnicity or national origin, disability, pregnancy, religion, covered veteran status, protected genetic information, or any other characteristic protected by law. 

Please click here and here for more information.

Accommodation in the Application Process: Acuity Inc. is an equal opportunity employer. It complies with the Americans with Disabilities Act (ADA) and other applicable laws requiring reasonable accommodation of persons with disabilities in employment. This includes the provision of reasonable accommodation in the application process. If you believe you need reasonable accommodation to assist with our online application system or any aspect of the application process, please contact Human Resources at (770) 922-9000, and select option 4.  Please be prepared to identify the requisition / position applied for and the aspect of the application process for which you believe accommodation is needed. The company will engage in an interactive process with you to better understand the request and to determine whether reasonable accommodation is needed and available.

Any unsolicited resumes sent to Acuity Inc. from a third party, such as an Agency recruiter, including unsolicited resumes sent to an Acuity Inc. mailing address, fax machine or email address, directly to Acuity Inc. employees, or to Acuity Inc. resume database will be considered Acuity Inc. property. Acuity Inc. will NOT pay a fee for any placement resulting from the receipt of an unsolicited resume.

Acuity Inc. will consider any candidate for whom an Agency has submitted an unsolicited resume to have been referred by the Agency free of any charges or fees. This includes any Agency that is an approved/engaged vendor, but does not have the appropriate approvals to be engaged on a search.

E-Verify Participation Poster

e-verify.gov

eeoc.gov

Protecting Yourself from Recruitment Scams: Acuity is committed to maintaining the integrity of our Talent Acquisition process and the security of our candidates. We are aware of phishing and fraudulent schemes in which individuals impersonate Acuity representatives or recruiting partners to solicit payments or sensitive personal information.

As you navigate your job search, please keep the following in mind:

No Financial Requests: Acuity will never ask candidates for payment, credit card information, banking details or other financial information during the interview process.

Verify Recruiter Communications: Legitimate communications from Acuity recruiters will come from an “@acuityinc.com” email address. If you are contacted by a recruiting agency regarding a role with Acuity, the agency should clearly identify itself and its relationship to Acuity. If you suspect any suspicious activity, verify the agency legitimacy by contacting +1 877-584-1411, option# 0.

Be Alert for Suspicious Activity: Exercise caution if you receive unsolicited outreach with unusual requests, grammatical errors, requests for personal or financial information, or pressure to act quickly. Always verify the sender before sharing information or clicking links.

Report Suspected Fraud: If you receive a suspicious message or believe someone is impersonating Acuity or one of our recruiting partners, please contact +1 877-584-141, option# 0, report the incident to the FTC at ReportFraud.ftc.gov, or to your state attorney general.

Platform & Identity Architect

Job Description