IAM Architect: Zero Trust & AI-Ready Security

Lumen; Salem (OR); Remote; USD 160,000 - 213,000; Full time

Benefits offered by this job

Health benefits

Life benefits

Voluntary lifestyle benefits

Job summary

Lumen is seeking a senior security architect to define and own IAM and security architecture for its NaaS platform and AI/agent ecosystems. You will embed security into design, align with FedRAMP and compliance, and lead multi-cloud identity efforts across portals, APIs, and services.

The role emphasizes Zero Trust, CIAM, SSO, and IAM-as-Code, with heavy collaboration with the Security team to shape secure, scalable, and AI-enabled connectivity for government and enterprise customers.

Qualifications

• Bachelor's degree in CS/Engineering/InfoSec with 12+ years of relevant experience or
• Master's degree with 10+ years of relevant experience
• CISSP, CISM, or equivalent security certification preferred

Responsibilities

• Own IAM strategy and target-state architecture across Lumen's NaaS identity ecosystem (LIAM/ECAPS, Entra ID/B2C, AWS IAM).
• Design and operationalize Zero Trust identity principles: continuous verification, least privilege, risk-based access.
• Architect CIAM: portal, mobile, and API access patterns with security and user experience balance.
• Define authentication and federation standards: OAuth 2.0, OpenID Connect, SAML across APIs and surfaces.
• SSO architecture across NaaS portal, partner portals, and government-facing services (EntraB2C).
• Develop IAM governance: RBAC/ABAC, access lifecycle, entitlement reviews, audit trails.
• Define IAM-as-Code: Terraform-based identity config, version-controlled, auditable.
• Architect security for agentic AI systems: agent authentication, audit trails, token lifecycle for agents.
• Provide security architecture for FedRAMP-aligned government initiatives: boundary preservation, tokenization, identity flow.
• Embedded DJAS security architect for multi-cloud networking: IAM and security boundaries across cloud-to-cloud/physical interconnects.
• Security reviews on NaaS designs: threat modeling, attack surface analysis, risk-based recommendations.
• Define security NFRs for DJAS designs from a security perspective.
• Partner with Lumen Security to bring security perspective into DJAS design work proactively.

Skills

AI-first

IAM architecture

Zero Trust

CIAM

OAuth/OIDC/SAML

Threat modeling

Education

Bachelor's degree + 12+ years

Master's degree + 10+ years

Tools

Microsoft Entra ID/Azure AD

AWS IAM

Terraform

Entra B2C

Job description

Lumen is seeking a senior security architect to define and own IAM and security architecture for its NaaS platform and AI/agent ecosystems. You will embed security into design, align with FedRAMP and compliance, and lead multi-cloud identity efforts across portals, APIs, and services.

The role emphasizes Zero Trust, CIAM, SSO, and IAM-as-Code, with heavy collaboration with the Security team to shape secure, scalable, and AI-enabled connectivity for government and enterprise customers.