Architect Visa Sponsorship Jobs in Colorado
Architect visa sponsorship jobs in Colorado are concentrated in Denver, Boulder, and Colorado Springs, where firms like Gensler, HOK, and Stantec regularly hire internationally. Colorado's booming construction market, driven by urban growth and mountain resort development, keeps demand for licensed architects high across commercial, residential, and public-sector projects.
Find Architect JobsOverview
Showing 5 of 114+ Architect Jobs in Colorado with Visa Sponsorship
See all 114+ Architect Jobs in Colorado with Visa Sponsorship
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Architect Jobs in Colorado with Visa Sponsorship.
Get Access To All JobsOverview
As a Principal Identity Architect, you will lead Epsilon's identity modernization - transitioning from legacy SAML and long-lived credentials to a modern, OAuth 2.1 / OpenID Connect (OIDC)-first model. You'll design secure, scalable identity patterns across multi-cloud environments while enabling teams to build with speed and confidence.
You'll partner closely with Security, Cloud, Platform, and Engineering teams to replace API keys and service accounts with scoped, ephemeral machine identities, establish enterprise standards, and deliver secure, developer-friendly integrations.
This is a hands-on leadership role for someone who can drive strategy, mentor engineers, and turn architecture into real-world implementations.
Responsibilities
What You'll Achieve
Modern Identity Architecture
- Lead adoption of OAuth 2.1 / OIDC; drive migration from SAML and legacy auth
- Design secure token flows (Auth Code + PKCE, Client Credentials, delegated access)
- Define standards for token usage, scopes, claims, and lifecycle management
- Reduce risk from token leakage, replay, and over-permissioning
Machine & Non-Human Identity
- Replace long-lived credentials with modern machine identity patterns
- Design M2M authentication for APIs, data pipelines, and platform workloads
- Partner with teams on service account migration and secrets reduction
Platform & Integration Engineering
- Build reusable identity patterns across IdPs, API gateways, and cloud platforms
- Enable secure, scalable access across AWS, Azure, and/or GCP
- Troubleshoot complex auth issues in hybrid and multi-cloud environments
Security, Governance & Observability
- Apply Zero Trust principles (least privilege, scoped access)
- Improve identity logging, monitoring, and audit readiness
- Establish governance for OAuth apps, scopes, and access policies
Leadership & Delivery
- Drive identity modernization programs end-to-end
- Mentor architects and engineers; set technical standards
- Break down complex initiatives into actionable workstreams
- Lead incident response and improve operational visibility
Qualifications
Who you Are
What you'll Bring with you
- Bachelors or Masters in Computer Science or related field.
- 7+ years in IAM, security engineering, or platform roles
- 3+ years hands-on with OAuth 2.0 / OIDC in production
- Strong expertise in token flows, scopes, claims, and secure design patterns
- Experience implementing machine identity (M2M, workload identity, etc.)
- Track record of modernizing identity (SAML OIDC or similar)
- Experience with AWS, Azure, or GCP identity services
- Ability to lead initiatives, influence teams, and deliver at scale
How you'll Stand out from other Talent
- Experience with API security, data platforms, or service-to-service auth at scale
- Familiarity with SPIFFE/SPIRE, OPA, or advanced authorization models
- Experience with Okta, Entra ID (Azure AD), Auth0, or Ping
- Exposure to AI/agent-based identity patterns
- Scripting or automation (Python, Bash)
Additional Information
When you join Epsilon, we'll create something EPIC together. We're a global leader in data and identity, with deep expertise in digital media, clean rooms, customer data platforms, loyalty and marketing services. Positioned at the center of Publicis Groupe, Epsilon helps brands deliver personalized experiences at scale and build lasting customer relationships by unlocking the full potential of data and identity. Epsilon operates in 30+ countries across EMEA, the Americas and APAC, with more than 8,000 employees.
Epsilon has five values that define our culture and guide us as we create value for our clients, our people and consumers. We seek candidates who align with our company values, demonstrate them and make them meaningful in their day-to-day work:
- Act with integrity. We are transparent and have the courage to do the right thing.
- Work together to win together. We believe collaboration is the catalyst that unlocks our full potential.
- Innovate with purpose. We shape the market with big ideas that drive big outcomes.
- Respect all voices. We embrace differences and foster a culture of connection and belonging.
- Empower with accountability. We trust each other to own and deliver on common goals.
Because You Matter
As an Epsilon employee, you deserve perks and benefits that put you, your family and your finances first. Our benefits encompass a wide range of offerings, including but not limited to:
- Time to recharge: Flexible time off (FTO), 14 paid holidays, paid sick time
- Family well-being: Parental/new child leave, childcare & elder care assistance, adoption assistance
- Extra perks: Comprehensive health coverage, 401(k), tuition assistance, commuter benefits, professional development, employee recognition, charitable donation matching, health coaching and counseling
Epsilon benefits are subject to eligibility requirements and other terms.
Epsilon is an Equal Opportunity Employer. Epsilon's policy is not to discriminate against any applicant or employee based on actual or perceived race, age, sex or gender (including pregnancy), marital status, national origin, ancestry, citizenship status, mental or physical disability, religion, creed, color, sexual orientation, gender identity or expression (including transgender status), veteran status, genetic information or any other characteristic protected by applicable federal, state or local law. Epsilon also prohibits harassment of applicants and employees based on any of these protected categories. Epsilon will provide accommodations to applicants who need accommodations to complete the application process. Please reach out to LeaveofAbsence@epsilon.com to request an accommodation.
For San Francisco Bay and Los Angeles Areas: Epsilon will consider qualified applicants with criminal histories for employment in a manner consistent with the City of Los Angeles' Fair Chance Initiative for Hiring Ordinance and San Francisco Police Code Sections 4901-4919, commonly referred to as the San Francisco Fair Chance Ordinance. Applicants with criminal histories are welcome to apply.
Compensation Range: USD $127,900.00 - USD $237,500.00/Annually. This is the pay range the Company believes it will pay for this position at the time of this posting. Consistent with applicable law, compensation will be determined based on the skills, qualifications, and experience of the applicant along with the requirements of the position, and the Company reserves the right to modify this pay range at any time. Temporary roles may be eligible to participate in our freelancer/temporary employee medical plan through a third-party benefits administration system once certain criteria have been met. For regular roles, the Company will offer medical coverage, dental, vision, disability, 401k, and paid time off. The Company anticipates the application deadline for this job posting will be 10/12/2026.
Overview
As a Principal Identity Architect, you will lead Epsilon's identity modernization - transitioning from legacy SAML and long-lived credentials to a modern, OAuth 2.1 / OpenID Connect (OIDC)-first model. You'll design secure, scalable identity patterns across multi-cloud environments while enabling teams to build with speed and confidence.
You'll partner closely with Security, Cloud, Platform, and Engineering teams to replace API keys and service accounts with scoped, ephemeral machine identities, establish enterprise standards, and deliver secure, developer-friendly integrations.
This is a hands-on leadership role for someone who can drive strategy, mentor engineers, and turn architecture into real-world implementations.
Responsibilities
What You'll Achieve
Modern Identity Architecture
- Lead adoption of OAuth 2.1 / OIDC; drive migration from SAML and legacy auth
- Design secure token flows (Auth Code + PKCE, Client Credentials, delegated access)
- Define standards for token usage, scopes, claims, and lifecycle management
- Reduce risk from token leakage, replay, and over-permissioning
Machine & Non-Human Identity
- Replace long-lived credentials with modern machine identity patterns
- Design M2M authentication for APIs, data pipelines, and platform workloads
- Partner with teams on service account migration and secrets reduction
Platform & Integration Engineering
- Build reusable identity patterns across IdPs, API gateways, and cloud platforms
- Enable secure, scalable access across AWS, Azure, and/or GCP
- Troubleshoot complex auth issues in hybrid and multi-cloud environments
Security, Governance & Observability
- Apply Zero Trust principles (least privilege, scoped access)
- Improve identity logging, monitoring, and audit readiness
- Establish governance for OAuth apps, scopes, and access policies
Leadership & Delivery
- Drive identity modernization programs end-to-end
- Mentor architects and engineers; set technical standards
- Break down complex initiatives into actionable workstreams
- Lead incident response and improve operational visibility
Qualifications
Who you Are
What you'll Bring with you
- Bachelors or Masters in Computer Science or related field.
- 7+ years in IAM, security engineering, or platform roles
- 3+ years hands-on with OAuth 2.0 / OIDC in production
- Strong expertise in token flows, scopes, claims, and secure design patterns
- Experience implementing machine identity (M2M, workload identity, etc.)
- Track record of modernizing identity (SAML OIDC or similar)
- Experience with AWS, Azure, or GCP identity services
- Ability to lead initiatives, influence teams, and deliver at scale
How you'll Stand out from other Talent
- Experience with API security, data platforms, or service-to-service auth at scale
- Familiarity with SPIFFE/SPIRE, OPA, or advanced authorization models
- Experience with Okta, Entra ID (Azure AD), Auth0, or Ping
- Exposure to AI/agent-based identity patterns
- Scripting or automation (Python, Bash)
Additional Information
When you join Epsilon, we'll create something EPIC together. We're a global leader in data and identity, with deep expertise in digital media, clean rooms, customer data platforms, loyalty and marketing services. Positioned at the center of Publicis Groupe, Epsilon helps brands deliver personalized experiences at scale and build lasting customer relationships by unlocking the full potential of data and identity. Epsilon operates in 30+ countries across EMEA, the Americas and APAC, with more than 8,000 employees.
Epsilon has five values that define our culture and guide us as we create value for our clients, our people and consumers. We seek candidates who align with our company values, demonstrate them and make them meaningful in their day-to-day work:
- Act with integrity. We are transparent and have the courage to do the right thing.
- Work together to win together. We believe collaboration is the catalyst that unlocks our full potential.
- Innovate with purpose. We shape the market with big ideas that drive big outcomes.
- Respect all voices. We embrace differences and foster a culture of connection and belonging.
- Empower with accountability. We trust each other to own and deliver on common goals.
Because You Matter
As an Epsilon employee, you deserve perks and benefits that put you, your family and your finances first. Our benefits encompass a wide range of offerings, including but not limited to:
- Time to recharge: Flexible time off (FTO), 14 paid holidays, paid sick time
- Family well-being: Parental/new child leave, childcare & elder care assistance, adoption assistance
- Extra perks: Comprehensive health coverage, 401(k), tuition assistance, commuter benefits, professional development, employee recognition, charitable donation matching, health coaching and counseling
Epsilon benefits are subject to eligibility requirements and other terms.
Epsilon is an Equal Opportunity Employer. Epsilon's policy is not to discriminate against any applicant or employee based on actual or perceived race, age, sex or gender (including pregnancy), marital status, national origin, ancestry, citizenship status, mental or physical disability, religion, creed, color, sexual orientation, gender identity or expression (including transgender status), veteran status, genetic information or any other characteristic protected by applicable federal, state or local law. Epsilon also prohibits harassment of applicants and employees based on any of these protected categories. Epsilon will provide accommodations to applicants who need accommodations to complete the application process. Please reach out to LeaveofAbsence@epsilon.com to request an accommodation.
For San Francisco Bay and Los Angeles Areas: Epsilon will consider qualified applicants with criminal histories for employment in a manner consistent with the City of Los Angeles' Fair Chance Initiative for Hiring Ordinance and San Francisco Police Code Sections 4901-4919, commonly referred to as the San Francisco Fair Chance Ordinance. Applicants with criminal histories are welcome to apply.
Compensation Range: USD $127,900.00 - USD $237,500.00/Annually. This is the pay range the Company believes it will pay for this position at the time of this posting. Consistent with applicable law, compensation will be determined based on the skills, qualifications, and experience of the applicant along with the requirements of the position, and the Company reserves the right to modify this pay range at any time. Temporary roles may be eligible to participate in our freelancer/temporary employee medical plan through a third-party benefits administration system once certain criteria have been met. For regular roles, the Company will offer medical coverage, dental, vision, disability, 401k, and paid time off. The Company anticipates the application deadline for this job posting will be 10/12/2026.
Architect Job Roles in Colorado
See all 114+ Architect Jobs in Colorado
Sign up for free to filter by visa type, set job alerts, and find employers with verified sponsorship history.
Search Architect Jobs in ColoradoArchitect Jobs in Colorado: Frequently Asked Questions
Which companies sponsor visas for architects in Colorado?
Large national and global firms with Colorado offices are the most consistent sponsors, including Gensler, HOK, Stantec, AECOM, and Leo A Daly. Regional firms like Davis Partnership Architects and RNL Design have also filed H-1B visa petitions for architect roles. Firms with active federal or large-scale commercial portfolios tend to have established immigration processes and prior sponsorship experience.
Which visa types are most common for architect roles in Colorado?
The H-1B is the primary visa for international architects in Colorado, as architecture qualifies as a specialty occupation requiring at least a bachelor's degree in architecture. The O-1A is an option for architects with demonstrated extraordinary ability, such as major awards or published work. Canadian and Mexican architects may qualify for the TN visa under NAFTA's successor agreement, USMCA, which lists architects as an eligible profession.
Which cities in Colorado have the most architect sponsorship jobs?
Denver accounts for the largest share of architect sponsorship activity in Colorado, driven by sustained commercial development, transit-oriented projects, and a dense concentration of architecture firms. Boulder draws demand from tech-campus and university-related projects. Colorado Springs has a steady public-sector and military-adjacent architecture market. Smaller mountain communities like Aspen and Vail occasionally post roles tied to high-end residential and resort development.
How to find architect visa sponsorship jobs in Colorado?
Migrate Mate filters job listings specifically by visa sponsorship availability, making it straightforward to identify architect roles in Colorado where employers are open to sponsoring. Search by role and state to surface firms with active openings and a history of international hiring. This saves significant time compared to manually screening job postings that rarely disclose sponsorship status upfront.
Are there state-specific considerations for internationally trained architects seeking sponsorship in Colorado?
Colorado requires architects to hold a valid license from the Colorado State Board of Licensure for Architects, Professional Engineers, and Professional Land Surveyors to practice independently. International candidates typically need NCARB certification or credential evaluation to meet licensure requirements. Employers sponsoring H-1B petitions must pay prevailing wages as determined by the Department of Labor for the specific metro area, which varies between Denver, Boulder, and smaller Colorado markets.
What is the prevailing wage for sponsored architect jobs in Colorado?
U.S. employers sponsoring a visa must pay at least the prevailing wage, which is what workers in the same role, area, and experience level typically earn. The Department of Labor sets this rate to make sure companies aren't hiring foreign workers simply because they'd accept lower pay than a U.S. worker. It varies by job title, location, and experience. You can look up current prevailing wage rates for any occupation and location using the OFLC Wage Search page.