Lead Solutions Architect; CIAM/XIAM
Lexington, Fayette County, Kentucky, 40598, USA
Listed on 2026-09-04
-
IT/Tech
Cybersecurity, Systems Engineer, IT Consultant, Cloud Computing: Infrastructure & Operations
Become a part of our caring community The Lead Solution Architect will serve as the technical leader for the organization's Customer Identity and Access Management (CIAM/XIAM) ecosystem. The role is responsible for driving architecture strategy, solution design, governance, and implementation of Forge Rock-based identity solutions across multiple enterprise programs and digital transformation initiatives. The successful candidate will provide subject matter expertise in identity and access management technologies, develop target-state architectures, and ensure all solutions align with security, compliance, scalability, and operational requirements.
Key Responsibilities- Lead architecture and design of enterprise-scale CIAM/XIAM solutions using Forge Rock.
- Define and maintain the strategic roadmap for customer identity platforms and services.
- Collaborate with business stakeholders, product teams, security teams, and engineering organizations to translate business requirements into scalable technology solutions.
- Drive solution architecture reviews and ensure adherence to enterprise architecture standards.
- Design and implement authentication, authorization, federation, SSO, MFA, adaptive authentication, and identity lifecycle management capabilities.
- Provide architecture governance and technical leadership across multiple programs and initiatives.
- Develop integration patterns with cloud platforms, APIs, customer applications, CRM systems, and third-party identity providers.
- Partner with cybersecurity teams to ensure compliance with security policies, regulatory requirements, and industry best practices.
- Support modernization initiatives, cloud adoption strategies, and zero-trust security architectures.
- Mentor solution architects, engineers, and developers on IAM best practices and architecture standards.
- Participate in production issue resolution, platform optimization, and continuous improvement activities.
- Evaluate emerging IAM technologies and recommend improvements to the enterprise identity ecosystem.
- Bachelor's degree in Computer Science, Information Systems, Engineering, or a related field.
- 10+ years of experience in solution architecture, application architecture, or enterprise architecture roles.
- 5+ years of hands‑on experience designing and implementing IAM/CIAM solutions.
- Strong expertise with Forge Rock Identity Platform (Identity Cloud, AM, IDM, DS, IG, or equivalent components).
- Experience with OAuth
2.0, OpenID Connect (OIDC), SAML, SCIM, JWT, MFA, and federation technologies. - Strong understanding of cloud platforms such as Azure, AWS, or Google Cloud.
- Experience integrating identity platforms with enterprise and customer‑facing applications.
- Knowledge of API security, microservices, and modern application architectures.
- Excellent stakeholder management, leadership, and communication skills.
- Forge Rock certifications.
- Experience with modern CIAM platforms and customer digital experience initiatives.
- Experience implementing Zero Trust security frameworks.
- Knowledge of Dev Sec Ops , CI/CD pipelines, and Infrastructure as Code.
- Familiarity with Agile delivery methodologies.
The role is primarily remote; however, candidates must reside in or be willing to work within one of the following locations:
Atlanta, GA;
Boston, MA;
Charlotte, NC;
Chicago, IL;
Dallas, TX;
Washington DC;
Ft. Lauderdale, FL;
Louisville, KY;
Nashville, TN;
New York, NY; or Tampa, FL. While day‑to‑day work is remote, occasional travel may be required for team collaboration, planning sessions, leadership meetings, or key business initiatives.
As part of our hiring process for this opportunity, we will be using an interviewing technology called Hire Vue to enhance our hiring and decision‑making ability. Hire Vue allows us to quickly connect and gain valuable information from you pertaining to your relevant skills and experience at a time that is best for your schedule.
Work‑At‑Home RequirementsTo ensure Home or Hybrid Home/Office employees’ ability to work effectively, the self‑provided internet service of Home or Hybrid Home/Office employees must meet the following criteria:
At…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).