> Markdown version of [/jobs/ext/2683709-lead-solutions-architect-ciam-xiam](https://www.wearedevelopers.com/jobs/ext/2683709-lead-solutions-architect-ciam-xiam). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Lead Solutions Architect (CIAM/XIAM) - **Company:** Humana Inc. - **Location:** Atlanta, GA, United States (Remote available) - **Experience:** Expert - **Salary:** $142,300.0 - $195,700.0 - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Agile Methodology, Amazon Web Services, Applications Architecture, Microsoft Azure, Cloud Computing, Program Optimization, Information Systems, Identity and Access Management, Internet Services, OAuth, OpenID, Openid Connect, Zero Trust Network Access, Security Assertion Markup Language (SAML), Google Cloud, Software Security, Customer Identity Access Management, Information Technology, Devsecops, Microservices - **Published:** September 2, 2026 - **Apply:** https://humana.wd5.myworkdayjobs.com/Humana_External_Career_Site/job/Louisville-KY/Lead-Solutions-Architect--CIAM-XIAM-_R-424546 ## About the Role * Bachelor's degree in Computer Science, Information Systems, Engineering, or a related field. * 10+ years of experience in solution architecture, application architecture, or enterprise architecture roles. * 5+ years of hands-on experience designing and implementing IAM/CIAM solutions. * Strong expertise with ForgeRock Identity Platform (Identity Cloud, AM, IDM, DS, IG, or equivalent components). * Experience with OAuth 2.0, OpenID Connect (OIDC), SAML, SCIM, JWT, MFA, and federation technologies. * Strong understanding of cloud platforms such as Azure, AWS, or Google Cloud. * Experience integrating identity platforms with enterprise and customer-facing applications. * Knowledge of API security, microservices, and modern application architectures. * Excellent stakeholder management, leadership, and communication skills. Preferred Qualifications * ForgeRock certifications. * Experience with modern CIAM platforms and customer digital experience initiatives. * Experience implementing Zero Trust security frameworks. * Knowledge of DevSecOps, CI/CD pipelines, and Infrastructure as Code. * Familiarity with Agile delivery methodologies. This role is primarily remote; however, candidates must reside in or be willing to work within one of the following locations: Atlanta, GA; Boston, MA; Charlotte, NC; Chicago, IL; Dallas, TX; Washington DC; Ft. Lauderdale, FL; Louisville, KY; Nashville, TN; New York, NY; or Tampa, FL. While day-to-day work is remote, occasional travel may be required for team collaboration, planning sessions, leadership meetings, or key business initiatives. ## Description The Lead Solution Architect will serve as the technical leader for the organization's Customer Identity and Access Management (CIAM/XIAM) ecosystem. The role is responsible for driving architecture strategy, solution design, governance, and implementation of ForgeRock-based identity solutions across multiple enterprise programs and digital transformation initiatives. The successful candidate will provide subject matter expertise in identity and access management technologies, develop target-state architectures, and ensure all solutions align with security, compliance, scalability, and operational requirements. Key Responsibilities * Lead architecture and design of enterprise-scale CIAM/XIAM solutions using ForgeRock. * Define and maintain the strategic roadmap for customer identity platforms and services. * Collaborate with business stakeholders, product teams, security teams, and engineering organizations to translate business requirements into scalable technology solutions. * Drive solution architecture reviews and ensure adherence to enterprise architecture standards. * Design and implement authentication, authorization, federation, SSO, MFA, adaptive authentication, and identity lifecycle management capabilities. * Provide architecture governance and technical leadership across multiple programs and initiatives. * Develop integration patterns with cloud platforms, APIs, customer applications, CRM systems, and third-party identity providers. * Partner with cybersecurity teams to ensure compliance with security policies, regulatory requirements, and industry best practices. * Support modernization initiatives, cloud adoption strategies, and zero-trust security architectures. * Mentor solution architects, engineers, and developers on IAM best practices and architecture standards. * Participate in production issue resolution, platform optimization, and continuous improvement activities. * Evaluate emerging IAM technologies and recommend improvements to the enterprise identity ecosystem., To ensure Home or Hybrid Home/Office employees' ability to work effectively, the self-provided internet service of Home or Hybrid Home/Office employees must meet the following criteria: * At minimum, a download speed of 25 Mbps and an upload speed of 10 Mbps is required; wireless, wired cable or DSL connection is suggested. * Satellite, cellular and microwave connection can be used only if approved by leadership. * Employees who live and work from Home in the state of California, Illinois, Montana, or South Dakota will be provided a bi-weekly payment for their internet expense. * Humana will provide Home or Hybrid Home/Office employees with telephone equipment appropriate to meet the business requirements for their position/job. * Work from a dedicated space lacking ongoing interruptions to protect member PHI / HIPAA information. ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Blueprints for Success: Steering a Global Data & AI Architecture](https://www.wearedevelopers.com/videos/1577-blueprints-for-success-steering-a-global-data-ai-architecture) - [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [DevSecOps: Security in DevOps](https://www.wearedevelopers.com/videos/36-devsecops-security-in-devops) - [Our GitOps approach for deploying an Identity Provider and an API Gateway in a SaaS company](https://www.wearedevelopers.com/videos/776-our-gitops-approach-for-deploying-an-identity-provider-and-an-api-gateway-in-a-saas-company) ## Related Articles - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Find a Developer Job: 12 Best Job Sites For Developers](https://www.wearedevelopers.com/magazine/165-find-a-developer-job-12-best-job-sites-for-developers) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Why Attend a Developer Event in 2026?](https://www.wearedevelopers.com/magazine/688-why-attend-a-developer-event-in-2026) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence)