Lead Solutions Architect (CIAM/XIAM)

About this role

Become a part of our caring community   The Lead Solution Architect will serve as the technical leader for the organization's Customer Identity and Access Management (CIAM/XIAM) ecosystem. The role is responsible for driving architecture strategy, solution design, governance, and implementation of ForgeRock-based identity solutions across multiple enterprise programs and digital transformation initiatives.

The successful candidate will provide subject matter expertise in identity and access management technologies, develop target-state architectures, and ensure all solutions align with security, compliance, scalability, and operational requirements.

Key Responsibilities • Lead architecture and design of enterprise-scale CIAM/XIAM solutions using ForgeRock. • Define and maintain the strategic roadmap for customer identity platforms and services. • Collaborate with business stakeholders, product teams, security teams, and engineering organizations to translate business requirements into scalable technology solutions. • Drive solution architecture reviews and ensure adherence to enterprise architecture standards. • Design and implement authentication, authorization, federation, SSO, MFA, adaptive authentication, and identity lifecycle management capabilities. • Provide architecture governance and technical leadership across multiple programs and initiatives. • Develop integration patterns with cloud platforms, APIs, customer applications, CRM systems, and third-party identity providers. • Partner with cybersecurity teams to ensure compliance with security policies, regulatory requirements, and industry best practices. • Support modernization initiatives, cloud adoption strategies, and zero-trust security architectures. • Mentor solution architects, engineers, and developers on IAM best practices and architecture standards. • Participate in production issue resolution, platform optimization, and continuous improvement activities. • Evaluate emerging IAM technologies and recommend improvements to the enterprise identity ecosystem.

Required Qualifications • Bachelor's degree in Computer Science, Information Systems, Engineering, or a related field. • 10+ years of experience in solution architecture, application architecture, or enterprise architecture roles. • 5+ years of hands-on experience designing and implementing IAM/CIAM solutions. • Strong expertise with ForgeRock Identity Platform (Identity Cloud, AM, IDM, DS, IG, or equivalent components). • Experience with OAuth 2.0, OpenID Connect (OIDC), SAML, SCIM, JWT, MFA, and federation technologies. • Strong understanding of cloud platforms such as Azure, AWS, or Google Cloud. • Experience integrating identity platforms with enterprise and customer-facing applications. • Knowledge of API security, microservices, and modern application architectures. • Excellent stakeholder management, leadership, and communication skills.  

Preferred Qualifications • ForgeRock certifications. • Experience with modern CIAM platforms and customer digital experience initiatives. • Experience implementing Zero Trust security frameworks. • Knowledge of DevSecOps, CI/CD pipelines, and Infrastructure as Code. • Familiarity with Agile delivery methodologies.

This role is primarily remote; however, candidates must reside in or be willing to work within one of the following locations: Atlanta, GA; Boston, MA; Charlotte, NC; Chicago, IL; Dallas, TX; Washington DC; Ft. Lauderdale, FL; Louisville, KY; Nashville, TN; New York, NY; or Tampa, FL. While day-to-day work is remote, occasional travel may be required for team collaboration, planning sessions, leadership meetings, or key business initiatives.

Use your skills to make an impact   Interview Format:           As part of our hiring process for this opportunity, we will be using an interviewing technology called HireVue to enhance our hiring and decision-making ability. HireVue allows us to quickly connect and gain valuable information from you pertaining to your relevant skills and experience at a time that is best for your schedule.

Work-At-Home Requirements To ensure Home or Hybrid Home/Office employees’ ability to work effectively, the self-provided internet service of Home or Hybrid Home/Office employees must meet the following criteria: • At minimum, a download speed of 25 Mbps and an upload speed of 10 Mbps is required; wireless, wired cable or DSL connection is suggested. • Satellite, cellular and microwave connection can be used only if approved by leadership. • Employees who live and work from Home in the state of California, Illinois, Montana, or South Dakota will be provided a bi-weekly payment for their internet expense. • Humana will provide Home or Hybrid Home/Office employees with telephone equipment appropriate to meet the business requirements for their position/job. • Work from a dedicated space lacking ongoing interruptions to protect member PHI / HIPAA information.

#LI-Remote ​ Social Security Task Humana values personal identity protection. Please be aware that applicants may be asked to provide their Social Security Number, if it is not already on file. When required, an email will be sent from Humana@myworkday.com with instructions on how to add the information into your official application on Humana’s secure website.

Limited Geography Remote - This is a remote position but located within a specific geography.

Work at Home Requirements: To ensure Home or Hybrid Home/Office employees’ ability to work effectively, the self-provided internet service of Home or Hybrid Home/Office employees must meet the following criteria: At minimum, a download speed of 25 Mbps and an upload speed of 10 Mbps is required; wireless, wired cable or DSL connection is suggested. In certain roles, the minimum recommended internet speed required by Humana may not be sufficient for business needs. Humana reserves the right to require associates to upgrade their internet service if necessary. Work from a dedicated

Similar jobs

• Customer Solution Architect — Boseallaboutme · MI - Troy, United States
• Chief Solutions Architect — CACI · National Harbor, MD
• Lead Solutions Architect (East Coast) — Blackduck · Remote
• Customer Solution Architect (AMER) — Supabase · Remote
• Lead Solutions Engineer — Imprint · New York, San Francisco
• Lead Solutions Engineer — Knot · New York, NY
• Customer Solutions Architect — Fivetran · USA - Austin (dbt)
• Solutions Architect, AMER — Fireblocks · United States