Senior IAM Architect — Zero-Trust & Automation

Lantern; Dallas (TX); Hybrid; USD 150,000 - 230,000; Full time

Benefits offered by this job

Medical Insurance

Vision Insurance

Disability Insurance

Life Insurance

401k with company match

Flexible Time Off

Job summary

Lantern is a specialty care platform connecting people with top specialists for surgery, cancer care, infusions, and more, with a focus on open by design security. Lantern seeks a Principal IAM Engineer to own the identity control plane end to end, reporting to the CISO and collaborating with IAM, platform, cloud, and service delivery teams in a hybrid Dallas office.

This senior individual-contributor role emphasizes automation, policy-as-code, and secure-by-default access to PHI.

Qualifications

• Eight or more years in identity and access management.
• Deep Microsoft Entra ID engineering, including Conditional Access policy design, phishing-resistant MFA, single sign-on, and federation across SAML, OIDC, and OAuth2.
• Identity lifecycle automation across cloud, SaaS, and privileged systems, with role- and attribute-based provisioning (RBAC/ABAC) and deprovisioning verified against an entitlement inventory.
• Zero Trust identity design, including least-privilege, just-in-time (JIT) access, and risk-based or adaptive access controls.
• Identity governance and administration (IGA) platform engineering, including privileged access management.

Responsibilities

• Own the identity lifecycle provisioning and deprovisioning, automated from role- and attribute-based models with deprovisioning verified against an entitlement inventory.
• Own access management, including Conditional Access, phishing-resistant MFA, and privileged access on a Zero Trust model, with least-privilege by default.
• Own directory and federation across Entra ID, single sign-on, SAML, OIDC, and OAuth2.
• Own secrets and non-human identity, including API keys, service accounts, and workload identity, and maintain an owner registry for them.
• Own key access governance and separation of duties in a model where another team operates the key management system.
• Own identity automation and identity-as-code, building lifecycle and access controls as reviewable, version-controlled infrastructure (Terraform and policy-as-code) rather than manual configuration.
• Own the identity-verification standard the service desk follows for password resets, MFA resets, and device enrollment.

Skills

Identity and Access Management

Zero Trust

Automation scripting

Microsoft Entra ID

Education

Bachelor’s degree or equivalent experience

Tools

PowerShell

Python

Terraform

Keeper PAM

Job description

Lantern is a specialty care platform connecting people with top specialists for surgery, cancer care, infusions, and more, with a focus on open by design security. Lantern seeks a Principal IAM Engineer to own the identity control plane end to end, reporting to the CISO and collaborating with IAM, platform, cloud, and service delivery teams in a hybrid Dallas office.

This senior individual-contributor role emphasizes automation, policy-as-code, and secure-by-default access to PHI.