Principal Architect - Identity, Access, and Management (Remote, US)

免费注册后解锁"你的匹配分 vs 高分画像"与个人技能缺口。

Lumen is the trusted network for the AI‑powered world, connecting people, data, and applications through our expansive fiber network and connected ecosystem. We enable secure, high‑performance connectivity across cloud, edge, and AI workloads for enterprises, governments, and communities. At Lumen, you’ll work on infrastructure customers rely on today and build for what’s next, where performance, security, and resilience matter. This is a high accountability environment where bold ideas drive real innovation for our customers, partners, and industry. The work is challenging, expectations are clear, and trust is built into how we operate. If you’re ready to take ownership, deliver meaningful impact, and help shape the future of AI‑ready connectivity, join us today. The Role Define and own identity, access management, and security architecture for Lumen's NaaS platform, customer-facing digital services, and AI/agent ecosystems. This role embeds security architecture directly into the Digital Journey Architecture and Solutions organization - providing the team with IAM and security expertise at the point of design, not as a downstream review function.The scope spans customer portal identity (who can access what and how), API security and authentication standards (OAuth2, OIDC, SAML), SSO integration (including Entra B2C for enterprise and government customers), FedRAMP and compliance-aligned security architecture, and the emerging security requirements of agentic AI systems. This role also serves as the primary DJAS interface for security architecture related to complex multi-cloud networking integrations and Lumen's public sector initiatives. Location This is a remote opportunity open to candidates located anywhere in the U.S. The Main Responsibilities Own IAM strategy and target-state architecture across Lumen's NaaS identity ecosystem: LIAM/ECAPS, Microsoft Entra ID/B2C, AWS IAM. Design and operationalize Zero Trust identity principles: continuous verification, risk-based access, least privilege enforcement. Architect customer identity and access management (CIAM): web portal, mobile, and API access patterns with security and customer experience in balance. Define authentication and federation standards: OAuth 2.0, OpenID Connect, SAML - enforced across APIs and customer-facing surfaces. Design SSO architecture across NaaS portal, partner portals, and government-facing services (Entra B2C). Develop IAM governance frameworks: RBAC/ABAC models, access lifecycle, entitlement review, audit evidence. Define IAM-as-Code practices: Terraform-based identity configuration, version-controlled, auditable Architect security for agentic AI systems: agent authentication, authorization boundaries, audit trails for AI-generated actions, token lifecycle management for agents. Provide security architecture for FedRAMP-aligned government initiatives: boundary preservation, tokenization patterns, identity flow compliance. Serve as the embedded DJAS security architect for multi-cloud networking integration: define IAM and security boundary requirements across cloud-to-cloud and cloud-to-physical network interconnects Conduct security architecture reviews on NaaS designs: threat modeling, attack surface analysis, risk-based recommendations. Define security NFRs for DJAS architecture work: what every design must address from a security perspective regardless of work type. Partner with Lumen's Security team (not owned by DJAS) and bring the security perspective into DJAS design work proactively. What We Look For in a Candidate Bachelor's degree in computer science, engineering, information security, or related field with 12+ years of relevant experience or Master's degree with 10+ years of relevant experience AI-first practitioner - actively integrates AI tools (LLMs, coding assistants, AI-powered analysis and design tools) as a routine part of architecture and engineering work, not as an occasional experiment. Candidates must demonstrate specific, c

Lumen是AI驱动世界的可信网络，通过我们广泛的光纤网络和互联生态系统连接人员、数据和应用。我们为企业、政府和社区在云、边缘和AI工作负载中提供安全、高性能的连接。在Lumen，您将致力于客户今天所依赖的基础设施，并为未来构建——性能、安全性和韧性至关重要。这是一个高问责环境，大胆的想法为我们的客户、合作伙伴和行业推动真正的创新。工作充满挑战，期望明确，信任融入我们的运营方式。如果您准备好承担责任、交付有意义的影响，并帮助塑造AI就绪连接的未来，今天就加入我们。 职位角色 为Lumen的NaaS平台、面向客户的数字服务以及AI/代理生态系统定义并拥有身份、访问管理和安全架构。该角色将安全架构直接嵌入数字旅程架构与解决方案组织——在设计阶段为团队提供IAM和安全专业知识，而非作为下游审查职能。范围涵盖客户门户身份（谁可以访问什么以及如何访问）、API安全和认证标准（OAuth2、OIDC、SAML）、SSO集成（包括面向企业和政府客户的Entra B2C）、FedRAMP和合规对齐的安全架构，以及代理式AI系统新兴的安全需求。该角色还担任DJAS与复杂多云网络集成和Lumen公共部门计划相关的安全架构的主要接口。 地点 这是一个远程机会，面向位于美国任何地方的候选人。 主要职责 拥有Lumen NaaS身份生态系统中的IAM战略和目标状态架构：LIAM/ECAPS、Microsoft Entra ID/B2C、AWS IAM。 设计并实施零信任身份原则：持续验证、基于风险的访问、最小权限执行。 架构客户身份和访问管理（CIAM）：Web门户、移动和API访问模式，在安全性和客户体验之间取得平衡。 定义认证和联合标准：OAuth 2.0、OpenID Connect、SAML——在API和面向客户的界面中强制执行。 设计跨NaaS门户、合作伙伴门户和面向政府服务的SSO架构（Entra B2C）。 开发IAM治理框架：RBAC/ABAC模型、访问生命周期、权限审查、审计证据。 定义IAM即代码实践：基于Terraform的身份配置、版本控制、可审计。 为代理式AI系统设计安全架构：代理认证、授权边界、AI生成操作的审计追踪、代理的令牌生命周期管理。 为FedRAMP对齐的政府计划提供安全架构：边界保护、令牌化模式、身份流合规。 担任多云网络集成的嵌入式DJAS安全架构师：定义云到云和云到物理网络互连的IAM和安全边界要求。 对NaaS设计进行安全架构审查：威胁建模、攻击面分析、基于风险的建议。 为DJAS架构工作定义安全NFR：无论工作类型如何，每个设计必须从安全角度解决什么。 与Lumen的安全团队（不归DJAS所有）合作，主动将安全视角带入DJAS设计工作。 我们在候选人中寻找什么 计算机科学、工程、信息安全或相关领域的学士学位，具有12年以上相关经验，或硕士学位具有10年以上相关经验。 AI优先实践者——积极将AI工具（LLM、编码助手、AI驱动的分析和设计工具）作为架构和工程工作的常规部分，而非偶尔的实验。候选人必须展示具体的、c

⚑ 岗位信息收录自公开招聘页（Himalayas），以雇主官网为准