[Hiring] Principal Architect - Identity, Access, and Management @Lumen Technologies

Role Description

Define and own identity, access management, and security architecture for Lumen's NaaS platform, customer-facing digital services, and AI/agent ecosystems. This role embeds security architecture directly into the Digital Journey Architecture and Solutions organization - providing the team with IAM and security expertise at the point of design, not as a downstream review function. The scope spans:

• Customer portal identity (who can access what and how)
• API security and authentication standards (OAuth2, OIDC, SAML)
• SSO integration (including Entra B2C for enterprise and government customers)
• FedRAMP and compliance-aligned security architecture
• Emerging security requirements of agentic AI systems

This role also serves as the primary DJAS interface for security architecture related to complex multi-cloud networking integrations and Lumen's public sector initiatives.

Qualifications

• Bachelor's degree in computer science, engineering, information security, or related field with 12+ years of relevant experience or Master's degree with 10+ years of relevant experience
• AI-first practitioner - actively integrates AI tools (LLMs, coding assistants, AI-powered analysis and design tools) as a routine part of architecture and engineering work
• Candidates must demonstrate specific, current examples of how AI has meaningfully accelerated or improved their work
• CISSP, CISM, or equivalent security certification preferred
• Deep expertise in enterprise IAM architecture: Microsoft Entra ID/Azure AD, AWS IAM - production scale
• Expert knowledge of OAuth 2.0, OpenID Connect, and SAML - not just implementation but architecture and standards governance
• Customer identity (CIAM) experience: portal, mobile, and API access patterns
• Zero Trust architecture principles and implementation experience
• RBAC/ABAC model design at enterprise scale
• FedRAMP, FISMA, or NIST 800-53 compliance architecture experience
• Security architecture for API ecosystems: API gateway security, token management, key rotation, scope enforcement
• Threat modeling disciplines (STRIDE or equivalent)

Requirements

• Own IAM strategy and target-state architecture across Lumen's NaaS identity ecosystem: LIAM/ECAPS, Microsoft Entra ID/B2C, AWS IAM
• Design and operationalize Zero Trust identity principles: continuous verification, risk-based access, least privilege enforcement
• Architect customer identity and access management (CIAM): web portal, mobile, and API access patterns with security and customer experience in balance
• Define authentication and federation standards: OAuth 2.0, OpenID Connect, SAML - enforced across APIs and customer-facing surfaces
• Design SSO architecture across NaaS portal, partner portals, and government-facing services (Entra B2C)
• Develop IAM governance frameworks: RBAC/ABAC models, access lifecycle, entitlement review, audit evidence
• Define IAM-as-Code practices: Terraform-based identity configuration, version-controlled, auditable
• Architect security for agentic AI systems: agent authentication, authorization boundaries, audit trails for AI-generated actions, token lifecycle management for agents
• Provide security architecture for FedRAMP-aligned government initiatives: boundary preservation, tokenization patterns, identity flow compliance
• Serve as the embedded DJAS security architect for multi-cloud networking integration: define IAM and security boundary requirements across cloud-to-cloud and cloud-to-physical network interconnects
• Conduct security architecture reviews on NaaS designs: threat modeling, attack surface analysis, risk-based recommendations
• Define security NFRs for DJAS architecture work: what every design must address from a security perspective regardless of work type
• Partner with Lumen's Security team and bring the security perspective into DJAS design work proactively

Benefits

• Comprehensive package featuring a broad range of Health, Life, Voluntary Lifestyle benefits and other perks
• Short-term incentives, long-term incentives, and/or sales compensation available