• Own the architecture, security, and day-to-day operations of our enterprise Okta tenant, including delivery of Okta Identity Governance (OIG), lifecycle management, SCIM provisioning, SSO integrations (SAML/OIDC), MFA, risk-based policies, and device trust. • Design and maintain Infrastructure-as-Code for identity and access using Terraform, building reusable modules, guardrails, and automated workflows integrated with HRIS and ITSM systems to achieve least-privilege and timely provisioning/deprovisioning. • Architect, operate, and continuously improve Instacart’s office network infrastructure (firewalls, routing/switching, wireless) across SF, NYC, and Toronto; drive zero-trust segmentation, observability, capacity planning, and vendor/partner management. • Lead and participate in incident response for identity and network events, drive rapid mitigation and root-cause analysis, and implement durable remediations through post-incident reviews and change management. • Standardize and execute certificate and key lifecycles for SAML/TLS across SaaS applications; eliminate manual toil with scripting and robust runbooks that increase reliability and auditability. • Partner with Security and Compliance to meet controls and audit needs (e.g., access reviews, evidence collection), improve access risk management, and unlock license savings via automated revocation and right-sizing. • Mentor teammates, elevate documentation and operational excellence, and help shape the roadmap by prioritizing high-impact work in a rapidly evolving environment.

Role Description We are seeking a highly skilled Lead Planning Engineer with a proven track record in planning and implementing Dense Wavelength Division Multiplexing (DWDM) networks. The ideal candidate will possess the expertise to read and interpret fiber characterization results and demonstrate a strategic mindset to develop comprehensive plans for circuit identification, overbuilds, and grooming strategies. This role requires a self-motivated individual capable of working under tight timelines with minimal supervision. As a Lead Planner, you will be expected to provide oversight over other planners on technical issues and project leadership. Location and Schedule This is a full time work from home position. The typical schedule is Monday - Friday 8am - 5pm. Main Responsibilities - Initiates projects utilizing the most feasible, practical, and economical means. - Performs engineering work and applied research, development and design of new projects, including design, fabrication, modification and evaluation of equipment and devices. - Analyzes complex local and wide area network systems and/or customer network environment, including planning, designing, evaluating, selecting operating systems and protocol suites and configuring communication media with concentrators, bridges and other devices. - Resolves difficult interoperability problems to obtain operation across all platforms including e-mail, files transfer, multimedia, teleconferencing and the like. - Configures systems to user environments. - Supports acquisition and implementation of hardware and software as well as subcontractor services. - Will act as a technical project leader or provide work leadership for other employees. Qualifications - Consulting level typically with 6+ years of experience. Bachelor's Degree. 4+ with a master's degree. - Proficient in designing, planning, and deploying DWDM networks. Ability to evaluate network requirements and develop robust network designs. Experience with various DWDM equipment and technologies. - Skilled in interpreting fiber characterization results, including OTDR, CD, and PMD testing. Ability to assess fiber quality and suitability for high-capacity DWDM applications. - Demonstrated ability to manage multiple projects simultaneously under tight deadlines. Experience coordinating with cross-functional teams to ensure timely project delivery. Proficient in project management tools and methodologies. - Strong analytical skills to identify potential network issues and develop effective solutions. Ability to make informed decisions based on technical analysis and business requirements. - Skilled in planning and/or engineering. - Must be capable of handling moderately complex engineering assignments. Preferred Qualifications - Excellent verbal and written communication skills to convey technical concepts to non-technical stakeholders. - Collaborative approach to work effectively with internal teams, vendors, and customers. - Ability to work independently with minimal supervision. - Self-driven and proactive in identifying opportunities for network improvements. Compensation This information reflects the anticipated base salary range for this position based on current national data. Minimums and maximums may vary based on location. Individual pay is based on skills, experience and other relevant factors. - $105,786 - $141,047 in these states: AL, AR, AZ, FL, GA, IA, ID, IN, KS, KY, LA, ME, MO, MS, MT, ND, NE, NM, OH, OK, PA, SC, SD, TN, UT, VT, WI, WV, WY - $111,074 - $148,099 in these states: CO, HI, MI, MN, NC, NH, NV, OR, RI - $116,364 - $155,152 in these states: AK, CA, CT, DC, DE, IL, MA, MD, NJ, NY, TX, VA, WA Benefits Lumen offers a comprehensive package featuring a broad range of Health, Life, Voluntary Lifestyle benefits and other perks that enhance your physical, mental, emotional and financial wellbeing. We're able to answer any additional questions you may have about our bonus structure (short-term incentives, long-term incentives and/or sales compensation) as you move through the selection process. Background Screening If you are selected for a position, there will be a background screen, which may include checks for criminal records and/or motor vehicle reports and/or drug screening, depending on the position requirements. Equal Employment Opportunities We are committed to providing equal employment opportunities to all persons regardless of race, color, ancestry, citizenship, national origin, religion, veteran status, disability, genetic characteristic or information, age, gender, sexual orientation, gender identity, gender expression, marital status, family status, pregnancy, or other legally protected status (collectively, “protected statuses”). We do not tolerate unlawful discrimination in any employment decisions, including recruiting, hiring, compensation, promotion, benefits, discipline, termination, job assignments or training. Privacy Notice Lumen is committed to protecting the privacy and security of personal information collected during the recruitment and hiring process. Our Privacy Notice explains how we collect, use, disclose, and protect applicant information, as well as how individuals may request access to or deletion of their personal data.

• Meet with Township, City, County, and State officials to discuss road and utility projects (travel required; mileage reimbursed) • Locate and identify Frontier facilities, working with project managers and municipal engineers to evaluate project impacts • Collaborate with other utilities to develop relocation plans that minimize conflicts and avoid delays • Field/design OSP BAU work orders (service orders, subdivisions, road moves, dark fiber MDU, copper/fiber aerial, buried, and underground) • Update design and project systems (FROGS, CAD, Varasset, SiteTracker) • Coordinate with power companies and communication providers regarding make-ready work, pole replacements, and service requests • Prepare and submit permits to local, state, and federal agencies (DOT, DNR, Railroad, Pipeline, etc.) • Partner with SSP Contractors to ensure timely and cost-effective construction • Address plant damage repair (PDR/DOR) requests, including cable count adjustments and capital projects • Conduct site surveys and design capital projects for cell towers • Support field and central office technicians by investigating and resolving PUC complaints • Work closely with Contract Engineers to ensure projects align with business and client needs

Role Description We are seeking a skilled ForgeRock Federation Engineer to support the design, implementation, and maintenance of secure identity federation solutions within a large federal IAM environment. This role focuses on enabling secure authentication and authorization data exchange across enterprise, cloud, and partner systems using the ForgeRock (PingOne Advanced Identity Cloud) platform, while ensuring compliance with federal security standards. - Configure and manage identity federation and SSO using SAML 2.0, OAuth 2.0, and OIDC - Establish and maintain IdP/SP trust relationships across enterprise and cloud systems - Design and implement ForgeRock components (AM, IDM, DS, IG) for scalable IAM solutions - Develop authentication journeys supporting MFA, adaptive access, and Zero Trust policies - Integrate with directory services (LDAP, Active Directory, Azure AD / Entra ID) - Enable application and API integrations using REST, SCIM, and federation protocols - Develop custom authentication nodes and scripts (Java, Groovy, JavaScript) - Support platform upgrades, patching, and DevOps automation (Docker, Kubernetes, CI/CD) - Ensure compliance with federal standards (NIST, FISMA, FedRAMP) - Troubleshoot complex federation and integration issues (L3 support) - Collaborate within agile teams for delivery and continuous improvement Qualifications - Bachelor’s degree and 5 years of experience or 9 years with a HS diploma/equivalent - 5 years of IAM engineering experience - Experience with ForgeRock or PingOne platform - Experience implementing federation and SSO solutions - Experience working in agile environments - Federation Protocols: SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), JWT, PKCE, mTLS experience - ForgeRock/Ping: AM, IDM, DS, IG configuration and administration experience - Directory Services: LDAP, Active Directory, Azure AD (Entra ID) experience - Experience in Java, Groovy, JavaScript; REST API integration - DevOps: Docker, Kubernetes, CI/CD tools (Jenkins, GitLab CI), Git experience - Familiarity with AWS, Azure, or GCP - Security: MFA, RBAC/ABAC, Zero Trust principles - U.S. Citizenship required - Ability to obtain and maintain the required agency clearance Requirements - Experience with Okta, SailPoint, CyberArk, or IBM Security Verify - Familiarity with PingFederate, PingAccess, or PingDirectory - Experience with CIAM (Customer Identity and Access Management) - Knowledge of identity analytics or AI-driven IAM tools - Prior federal IAM program experience (DoD, DHS, FSA, etc.) - Familiarity with NIST, FISMA, and FedRAMP compliance Certifications (Preferred) - ForgeRock or Ping Identity certifications - CISSP or Certified Identity and Access Manager (CIAM) - CompTIA Security+ Company Description Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Target Salary Range $80,000 - $128,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay. EEO EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.