• Own the enterprise IAM architecture strategy, target state, and roadmap across cloud, on-premises, and hybrid environments, aligned to Zero Trust and security standards. • Serve as the IAM technical authority and provide hands-on architectural leadership across infrastructure, cloud, and platform security initiatives. • Design and document end-to-end IAM capabilities across IGA, access management, PAM, secrets, and non-human identities. • Define integration patterns and reference architectures; evaluate build vs. buy and emerging IAM capabilities (e.g., passwordless, AI/agentic identities, decentralised identity) to deliver scalable services across applications, infrastructure, and DevOps tooling. • Architect authentication and authorisation (SSO, MFA, RBAC/ABAC) and standardize protocols (OAuth2/OIDC, SAML, SCIM, LDAP). • Lead IAM platform design and integration across cloud/hybrid (e.g., Microsoft Entra ID, Active Directory, SailPoint, PingFederate/Ping Identity, AWS IAM, CyberArk or equivalent). • Define identity lifecycle controls (joiner/mover/leaver, provisioning, access certifications, and role/entitlement modeling). • Identify IAM risks and architecture gaps; define constraints and mitigations, and drive remediation through roadmap and delivery items. • Ensure IAM controls and integrations meet security and regulatory requirements (e.g., NIST SP 800-63, ISO 27001, SOC 2, GDPR) and support audit activities. • Partner with business stakeholders to align IAM outcomes to enterprise objectives and communicate decisions and tradeoffs to senior leadership.

• Define and evolve the overall system architecture for the platform, ensuring scalability, performance, and resiliency. • Establish architecture standards, design principles, and best practices across engineering teams. • Lead design reviews and technical governance for major initiatives. • Drive adoption of modern architectural patterns (microservices, event-driven systems, API-first design). • Ensure robust security, compliance, and data privacy practices across systems. • Provide technical leadership across multiple teams, mentoring senior engineers. • Act as a go-to expert for complex technical challenges and escalations. • Influence engineering culture by promoting engineering excellence, code quality, and innovation. • Work with engineering leadership on long-term platform strategy and capacity planning. • Collaborate with DevOps and SRE teams to ensure efficient deployment and operational excellence. • Drive initiatives in AI integration, automation, and intelligent workflows. • Continuously improve development velocity and system performance.

• Serve as the primary technical authority for CPQ and Quote-to-Cash initiatives, representing Zaelab in client-facing architectural discussions, solution reviews, and technical decision-making. • Act as a subject matter expert in Quote-to-Cash processes, including product modeling, pricing strategies, discounting, approvals, contracts, and downstream order fulfillment. Lead architecture and functional design of custom product configurators, including technologies such as Logik.ai (ServiceNow). Translate complex revenue models into scalable CPQ architectures aligned with platform best practices. • Design scalable and secure architectures that integrate with commerce platforms, ERP systems, CDPs, middleware, and adjacent enterprise systems. Collaborate with clients and internal teams to create prototypes and proofs of concept to validate requirements and solution approaches. • Conduct business and technical discovery, assessing current-state revenue systems and defining future-state CPQ roadmaps. Lead business process mapping sessions and produce functional and architectural documentation. Perform gap analysis and identify opportunities to optimize business processes through CPQ and commerce capabilities. • Maintain a hands-on approach to solution delivery, contributing to configuration, development, and technical problem-solving alongside the team. Partner closely with developers to ensure designs are implemented accurately and efficiently. Troubleshoot complex functional and technical issues, identifying root causes and driving resolution. • Troubleshoot complex technical issues, ensuring consistent delivery momentum and high-quality outcomes. • Mentor consultants, developers, and analysts on CPQ architecture patterns, platform capabilities, and delivery best practices. Coach teams on balancing functional requirements with technical feasibility and long-term maintainability. Set quality standards for CPQ design, documentation, and delivery execution. • Partner with Solution Engineering and Sales teams to scope engagements, propose architecture approaches, and communicate solution value to B2B clients. Build trusted relationships with client sponsors and stakeholders, guiding strategic decision-making. Clearly articulate CPQ solution value to technical and non-technical audiences. • Contribute to Zaelab accelerators, templates, and repeatable CPQ implementation patterns. Stay current with CPQ, commerce, and platform trends, sharing insights internally and externally. Participate in internal enablement, client workshops, and industry/community forums.

Role Description We are looking for a strategic and technical Principal Architect to design the new architecture evolution for Lumen Connect. With a clear goal to improve the quality and availability of our digital platform, this role blends deep technical expertise with strong program management and communication skills, driving scalable, secure, and high-performing solutions on AWS. This Engineer also understands the software development lifecycle (from coding to support) and various automation tools for developing CI/CD pipelines. This role will shape how Lumen combines the latest technologies and services to automate all aspects of software deployment and application lifecycle management. Passionate about software automation and quality is always a priority. This role will also collaborate with key stakeholders across the engineering organization, including product owners, developers, and testers, to design, develop, and implement solutions to deliver amazing user experiences and optimize and automate business and technical processes. Qualifications - 12+ years of experience with a bachelor’s degree or 8+ years of experience with a master’s degree - Strong knowledge of AWS services and cloud-native design experience in AWS/Azure/GCP - Proven experience in software architecture, cloud engineering, and technical program management of complex projects with multiple stakeholders and dependencies - Experience of application development using Java Microservices and Spring Boot framework - Experience in developing REST APIs using microservice architecture - Experience in using RDBMS like Oracle, MySQL, SQL, and NOSQL - Experience in implementing CI/CD, preferably using GitHub/Jenkins - Experience in deploying apps to Kubernetes/Docker - Knowledge of web design and mark-up language HTML, CSS - Experience in frontend development (Javascript/Typescript, and frameworks such as VueJS) Requirements - Design the new architecture evolution for Lumen Connect, especially focused on its legacy systems with a focus on scalability, reliability, and performance - Work with multiple teams to architect, design and implement a data-driven backend architecture to improve response times and reliability - Architect large projects regarding new cutting-edge network products and provide a cloud-native digital experience that matches customer expectations - Use AI extensively to analyze large codebases and provide improvements - Help refine and improve the global ecosystem documentation to help AI agents develop larger features faster - Support the team in writing technical specifications for the high-level portal architecture - Lead cross-functional initiatives from concept to delivery, ensuring alignment with business goals - Develop and manage detailed project plans, timelines, and resource allocations - Act as a technical liaison between engineering, product, business, and external partners - Facilitate regular updates, demos, and reviews to ensure transparency and alignment - Drive cloud adoption and modernization strategies using AWS services (e.g., WAF, EC2, EKS, S3, CloudFront) - Ensure compliance with security, cost, and operational governance policies - Collaborate with DevOps and SRE teams to embed reliability and observability into architectural decisions - Identify opportunities for performance optimization, cost reduction, and technical debt remediation - Promote a culture of innovation, automation, and continuous learning - Mentor junior engineers and contribute to knowledge-sharing initiatives Benefits - Comprehensive package featuring a broad range of Health, Life, Voluntary Lifestyle benefits and other perks - Bonus structure (short-term incentives, long-term incentives and/or sales compensation)