Senior IAM & Zero-Trust Architect (Remote)

Lumen; Carson City (NV); Remote; USD 160,000 - 213,000; Full time

Job summary

Lumen is seeking an experienced security architect to define and own IAM, access management, and security architecture for our NaaS platform and AI/agent ecosystems. This role embeds security expertise at the design stage across Digital Journey Architecture and Solutions, enabling secure, scalable identity across multi-cloud environments.

You will advance CIAM for web, mobile, and API access, enforce OAuth 2.0, OpenID Connect, and SAML standards, implement SSO for portal ecosystems, and drive

Qualifications

• Bachelor's degree in computer science, engineering, information security, or related field with 12+ years of relevant experience or
• Master's degree with 10+ years of relevant experience
• AI-first practitioner who actively uses AI tools as part of architecture work
• CISSP, CISM, or equivalent security certification preferred
• Deep expertise in enterprise IAM architecture: Microsoft Entra ID/Azure AD, AWS IAM - production scale
• Expert knowledge of OAuth 2.0, OpenID Connect, and SAML - governance
• Zero Trust architecture principles and implementation experience
• RBAC/ABAC model design at enterprise scale
• FedRAMP, FISMA, or NIST 800-53 compliance architecture experience

Responsibilities

• Own IAM strategy and target-state architecture across NaaS identity ecosystem
• Design and operationalize Zero Trust identity principles
• Architect CIAM: portal, mobile, and API access patterns
• Define authentication and federation standards across APIs
• SSO architecture across NaaS portal and government services
• Develop IAM governance frameworks and entitlements reviews
• Define IAM-as-Code practices with Terraform
• Architect security for agentic AI systems and token lifecycle management
• Provide security architecture for FedRAMP-aligned government initiatives
• Embed security architect for multi-cloud networking integration
• Conduct security architecture reviews including threat modeling
• Define security NFRs for DJAS architecture
• Partner with Security team to bring security perspective into DJAS design

Skills

IAM architecture

Zero Trust

CIAM

OAuth 2.0

OpenID Connect

SAML

SSO

FedRAMP

RBAC/ABAC

Terraform

Multi-cloud

Education

Bachelor's degree + 12+ years

Master's degree + 10+ years

Tools

Microsoft Entra ID

Azure AD

AWS IAM

Job description

Lumen is seeking an experienced security architect to define and own IAM, access management, and security architecture for our NaaS platform and AI/agent ecosystems. This role embeds security expertise at the design stage across Digital Journey Architecture and Solutions, enabling secure, scalable identity across multi-cloud environments.

You will advance CIAM for web, mobile, and API access, enforce OAuth 2.0, OpenID Connect, and SAML standards, implement SSO for portal ecosystems, and drive