Lead Solutions Architect (CIAM/XIAM)

The Lead Solution Architect will serve as the technical leader for the organization’s Customer Identity and Access Management (CIAM/XIAM) ecosystem. The role is responsible for driving architecture strategy, solution design, governance, and implementation of ForgeRock-based identity solutions across multiple enterprise programs and digital transformation initiatives.

The successful candidate will provide subject matter expertise in identity and access management technologies, develop target-state architectures, and ensure all solutions align with security, compliance, scalability, and operational requirements.

Key Responsibilities

• Lead architecture and design of enterprise-scale CIAM/XIAM solutions using ForgeRock.
• Define and maintain the strategic roadmap for customer identity platforms and services.
• Collaborate with business stakeholders, product teams, security teams, and engineering organizations to translate business requirements into scalable technology solutions.
• Drive solution architecture reviews and ensure adherence to enterprise architecture standards.
• Design and implement authentication, authorization, federation, SSO, MFA, adaptive authentication, and identity lifecycle management capabilities.
• Provide architecture governance and technical leadership across multiple programs and initiatives.
• Develop integration patterns with cloud platforms, APIs, customer applications, CRM systems, and third-party identity providers.
• Partner with cybersecurity teams to ensure compliance with security policies, regulatory requirements, and industry best practices.
• Support modernization initiatives, cloud adoption strategies, and zero-trust security architectures.
• Mentor solution architects, engineers, and developers on IAM best practices and architecture standards.
• Participate in production issue resolution, platform optimization, and continuous improvement activities.
• Evaluate emerging IAM technologies and recommend improvements to the enterprise identity ecosystem.

This role is primarily remote; however, candidates must reside in or be willing to work within one of the following locations: Atlanta, GA; Boston, MA; Charlotte, NC; Chicago, IL; Dallas, TX; Washington DC; Ft. Lauderdale, FL; Louisville, KY; Nashville, TN; New York, NY; or Tampa, FL. While day-to-day work is remote, occasional travel may be required for team collaboration, planning sessions, leadership meetings, or key business initiatives.

• Bachelor’s degree in Computer Science, Information Systems, Engineering, or a related field.
• 10+ years of experience in solution architecture, application architecture, or enterprise architecture roles.
• 5+ years of hands-on experience designing and implementing IAM/CIAM solutions.
• Strong expertise with ForgeRock Identity Platform (Identity Cloud, AM, IDM, DS, IG, or equivalent components).
• Experience with OAuth 2.0, OpenID Connect (OIDC), SAML, SCIM, JWT, MFA, and federation technologies.
• Strong understanding of cloud platforms such as Azure, AWS, or Google Cloud.
• Experience integrating identity platforms with enterprise and customer-facing applications.
• Knowledge of API security, microservices, and modern application architectures.
• Excellent stakeholder management, leadership, and communication skills.

Preferred Qualifications

• ForgeRock certifications.
• Experience with modern CIAM platforms and customer digital experience initiatives.
• Experience implementing Zero Trust security frameworks.
• Knowledge of DevSecOps, CI/CD pipelines, and Infrastructure as Code.
• Familiarity with Agile delivery methodologies.

Work at Home Requirements: To ensure Home or Hybrid Home/Office employees’ ability to work effectively, the self-provided internet service of Home or Hybrid Home/Office employees must meet the following criteria: At minimum, a download speed of 25 Mbps and an upload speed of 10 Mbps is required; wireless, wired cable or DSL connection is suggested. In certain roles, the minimum recommended internet speed required by Humana may not be sufficient for business needs. Humana reserves the right to require associates to upgrade their internet service if necessary. Work from a dedicated space lacking ongoing interruptions to protect member PHI / HIPAA information.

Travel: While this is a remote position, occasional travel to Humana’s offices for training or meetings may be required.

The compensation range below reflects a good faith estimate of starting base pay for full time (40 hours per week) employment at the time of posting. The pay range may be higher or lower based on geographic location and individual pay will vary based on demonstrated job related skills, knowledge, experience, education, certifications, etc.

$142,300 - $195,700 per year

This job is eligible for a bonus incentive plan. This incentive opportunity is based upon company and/or individual performance.

Description of Benefits

Humana, Inc. and its affiliated subsidiaries (collectively, “Humana”) offers competitive benefits that support whole-person well-being. Associate benefits are designed to encourage personal wellness and smart healthcare decisions for you and your family while also knowing your life extends outside of work. Among our benefits, Humana provides medical, dental and vision benefits, 401(k) retirement savings plan, time off (including paid time off, company and personal holidays, paid parental and caregiver leave), short-term and long-term disability, life insurance and many other opportunities.

About Humana: Humana Inc. (NYSE: HUM) is a leading U.S. healthcare company. Through our Humana insurance services and our CenterWell healthcare services, we make it easier for the millions of people we serve to achieve their best health - delivering the care and service they need, when they need it. These efforts are leading to a better quality of life for people with Medicare and Medicaid, families, individuals, military service personnel, and communities at large. Learn more about what we offer at Humana.com and at CenterWell.com.