> Markdown version of [/jobs/ext/2164189-principal-architect-identity-access-and-management](https://www.wearedevelopers.com/jobs/ext/2164189-principal-architect-identity-access-and-management). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Principal Architect - Identity, Access, and Management - **Company:** Lumen Inc - **Location:** Santa Fe, NM, United States (Remote available) - **Experience:** Expert - **Salary:** $152,066.0 - $202,755.0 - **Contract:** Permanent contract - **Skills:** Microsoft Access, Application Programming Interfaces (APIs), Artificial Intelligence, Audit Trail, Configuration Management, Cyber Security, Federated Identity Management, Identity and Access Management, Web Portals, Network Security, OAuth, OpenID, PCI Data Security Standards, Role-Based Access Control, Openid Connect, Azure Active Directory, Zero Trust Network Access, Security Assertion Markup Language (SAML), Wide Area Networks, Large Language Models, Software Security, Multi-Cloud, Customer Identity Access Management, Information Technology, Api Gateway, Terraform - **Published:** August 21, 2026 - **Apply:** https://www.techcareers.com/job.asp?id=3361185019&tx=JK2519FFG&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54 ## About the Role * Bachelor's degree in computer science, engineering, information security, or related field with 12+years of relevant experience or * Master's degree with 10+ years of relevant experience * AI-first practitioner - actively integrates AI tools (LLMs, coding assistants, AI-powered analysis anddesign tools) as a routine part of architecture and engineering work, not as an occasional experiment. * Candidates must demonstrate specific, current examples of how AI has meaningfully accelerated orimproved their work. * CISSP, CISM, or equivalent security certification preferred * Deep expertise in enterprise IAM architecture: Microsoft Entra ID/Azure AD, AWS IAM - productionscale * Expert knowledge of OAuth 2.0, OpenID Connect, and SAML - not just implementation but architectureand standards governance * Customer identity (CIAM) experience: portal, mobile, and API access patterns * Zero Trust architecture principles and implementation experience * RBAC/ABAC model design at enterprise scale * FedRAMP, FISMA, or NIST 800-53 compliance architecture experience * Security architecture for API ecosystems: API gateway security, token management, key rotation,scope enforcement * Threat modeling disciplines (STRIDE or equivalent) Preferred: * Experience securing agentic AI systems or autonomous workflow platforms * Microsoft Entra B2C (government/B2C federated identity) experience * Experience with multi-cloud networking security or cloud-to-physical network security boundaries * (SD-WAN, SASE, network security gateways) * PAM (Privileged Access Management) architecture experience * IAM-as-Code: Terraform-based identity configuration management * Government/Public Sector cloud security architecture experience (GovCloud, FedRAMPHigh/Moderate) * Understanding of compliance frameworks across multiple regulators: ISO 27001, SOC 2, PCI-DSS,GDPR ## Description Define and own identity, access management, and security architecture for Lumen's NaaS platform, customer-facing digital services, and AI/agent ecosystems. This role embeds security architecture directly into the Digital Journey Architecture and Solutions organization - providing the team with IAM and security expertise at the point of design, not as a downstream review function.The scope spans customer portal identity (who can access what and how), API security and authentication standards (OAuth2, OIDC, SAML), SSO integration (including Entra B2C for enterprise and government customers), FedRAMP and compliance-aligned security architecture, and the emerging security requirements of agentic AI systems. This role also serves as the primary DJAS interface for security architecture related to complex multi-cloud networking integrations and Lumen's public sector initiatives., * Own IAM strategy and target-state architecture across Lumen's NaaS identity ecosystem:LIAM/ECAPS, Microsoft Entra ID/B2C, AWS IAM. * Design and operationalize Zero Trust identity principles: continuous verification, risk-based access,least privilege enforcement. * Architect customer identity and access management (CIAM): web portal, mobile, and API accesspatterns with security and customer experience in balance. * Define authentication and federation standards: OAuth 2.0, OpenID Connect, SAML - enforced across * APIs and customer-facing surfaces. * Design SSO architecture across NaaS portal, partner portals, and government-facing services (EntraB2C). * Develop IAM governance frameworks: RBAC/ABAC models, access lifecycle, entitlement review, auditevidence. * Define IAM-as-Code practices: Terraform-based identity configuration, version-controlled, auditable * Architect security for agentic AI systems: agent authentication, authorization boundaries, audit trails forAI-generated actions, token lifecycle management for agents. * Provide security architecture for FedRAMP-aligned government initiatives: boundary preservation,tokenization patterns, identity flow compliance. * Serve as the embedded DJAS security architect for multi-cloud networking integration: define IAM andsecurity boundary requirements across cloud-to-cloud and cloud-to-physical network interconnects * Conduct security architecture reviews on NaaS designs: threat modeling, attack surface analysis,risk-based recommendations. * Define security NFRs for DJAS architecture work: what every design must address from a securityperspective regardless of work type. * Partner with Lumen's Security team (not owned by DJAS) and bring the security perspective into DJASdesign work proactively. ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Building Sovereign AI: Lessons from Deploying Secure RAG Systems using Confidential Computing](https://www.wearedevelopers.com/videos/100108-building-sovereign-ai-lessons-from-deploying-secure-rag-systems-using-confidential-computing) - [Infrastructure as Code: The Developer's Secret Weapon](https://www.wearedevelopers.com/videos/1221-infrastructure-as-code-the-developer-s-secret-weapon) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) - [Headless by Design: Building Enterprise Systems That Agents Can Actually Use](https://www.wearedevelopers.com/videos/100092-headless-by-design-building-enterprise-systems-that-agents-can-actually-use) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Graph and AI Trends 2026: Why Is AI Running but Not Yet Delivering?](https://www.wearedevelopers.com/magazine/680-graph-and-ai-trends-2026-why-is-ai-running-but-not-yet-delivering) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence) - [What Are Large Language Models?](https://www.wearedevelopers.com/magazine/304-what-are-large-language-models) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift)