Senior Product Manager, Identity & Authentication Platform BU

2 мес. назад

CanadaWorldwideSenior

samloidcoauth2mfaai coding tools

Senior Product Manager role owning the identity and authentication platform, focusing on SAML, OAuth, MFA, and security protocols.

О компании

is the AI leader in governance, risk and compliance (GRC) SaaS solutions, helping more than 1 million users and 700,000 board members to clarify risk and elevate governance. The One Platform gives practitioners, the C-Suite and the board a consolidated view of their entire GRC practice so they can more effectively manage risk, build greater resilience and make better decisions, faster. 
Learn more at .com or follow us on  LinkedIn  and  Facebook
 
 
What Offers You  
Creativity is ingrained in our culture. We are innovative collaborators by nature. We thrive in exploring how things can be differently both in our internal processes and to help our clients
We care about our people.  offers a flexible work environment, global days of service, comprehensive health benefits, meeting free days, generous time off policy and wellness programs to name a few
We have teams all over the world . We may be headquartered in New York City, but we have office hubs in Washington D.C., Vancouver, London, Galway, Budapest, Munich, Bengaluru, Singapore, and Sydney.
Diversity is important to us. Growing, maintaining and promoting a diverse team is a top priority for us. We foster and encourage diversity through our Employee Resource Groups and provide access to resources and education to support the education of our team, facilitate dialogue, and foster understanding.
created the modern governance movement. Our world-changing idea is to empower leaders with the technology, insights and connections they need to drive greater impact and accountability – to lead with purpose. Our employees are passionate, smart, and creative people who not only want to help build the software company of the future, but who want to make the world a more sustainable, equitable and better place. 
Headquartered in New York, has offices in Washington D.C.,  London, Galway, Budapest, Vancouver, Bengaluru, Munich, Singapore and Sydney.  To foster strong collaboration and connection, this role will follow a hybrid work model. If you are within a commuting distance to one of our office locations, you will be expected to  work onsite at least 50% of the time.  We believe that in-person engagement helps drive innovation, teamwork, and a strong sense of community.
 
We are a drug free workplace. is proud to be an equal opportunity employer. We do not discriminate based on race, color, religious creed, sex, national origin, ancestry, citizenship status, pregnancy, childbirth, physical disability, mental disability, age, military status, protected veteran status, marital status, registered domestic partner or civil union status, gender (including sex stereotyping and gender identity or expression), medical condition (including, but not limited to, cancer related or HIV/AIDS related), genetic information, or sexual orientation in accordance with applicable federal, state and local laws. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also 's EEO Policy and Know You
At , we recognize the value of a diverse global workforce. Visa sponsorship may be available for select positions based on business needs and specific role requirements. Sponsorship decisions are evaluated on a case-by-case basis, and eligibility should not be assumed for all opportunities.
To all recruitment agencies: does not accept unsolicited agency resumes. Please do not forward resumes to our jobs alias, employees or any other organization location. is not responsible for any fees related to unsolicited resumes.

Обязанности

Identity infrastructure is not  glamourware . It  doesn't  get standing ovations at company all-hands. But it is the thing every product in the portfolio depends on, and when it breaks, everyone knows. If  you're  the kind of PM who finds that genuinely interesting, read on.  
This role is for someone who has lived inside SAML flows, argued over PKCE token lifetimes, and knows exactly why SSO bypass lists are a necessary compromise.  You'll  own the authentication platform that thousands of enterprise customers trust, and  you'll  shape it alongside engineers who go deep. No surface-level roadmap ownership here.  
 
Here's  a breakdown of what  you'll  do (not all of it, just the important stuff)  
Own the product strategy and roadmap for core authentication flows: SAML 2.0, OIDC/OAuth 2.0 with PKCE, MFA enforcement, token lifecycle management, and multi-IdP federation.  
Make product decisions that sit at the intersection of system design, security architecture, and developer experience, working directly with senior engineers on protocol choices and infrastructure trade-offs.  
Drive adoption of platform identity capabilities across internal engineering teams through influence, moving products toward modern API patterns and away from legacy integration surfaces.  
Use AI coding tools (Claude Code, Cursor, or similar) to prototype ideas and validate concepts before you pitch them; this is expected, not optional.  
Track the IAM standards landscape, including passkeys, FIDO2, SCIM, zero-trust, and verifiable credentials, and use that knowledge to sharpen product direction.  
Translate complex authentication concepts (JWT structures, SAML assertions, PKCE handshakes) into clear specs, user stories, and prioritized backlogs for audiences from engineers to executives.  
 
These are the essentials  you'll  need to get an interview  
Hands-on knowledge of SAML 2.0, OIDC, OAuth 2.0, PKCE, JWT, MFA/TOTP, and SSO federation; you've made production decisions with these, not just read about them.  
Experience owning IAM products, developer-facing identity platforms, or authentication infrastructure in a SaaS environment.  
3 - 7 years of product management experience on technically complex platform or infrastructure products.  
Comfort with access control concepts: RBAC, ABAC, scopes, entitlements, and user provisioning and deprovisioning flows.  
Experience in a platform or shared services context where your customers are internal engineering teams.  
Familiarity with enterprise IdP ecosystems such as Okta, Azure AD, Ping Identity, or Google Workspace.  
An active AI-native work style; you already use AI tools to investigate systems, prototype integrations, and close the feedback loop with engineering faster.  
 
It would be great if you had these too, but  we'll  support you if you  don't  
Exposure to GovCloud or regulated multi-region authentication environments.  
Experience conducting technical teardowns of identity platforms (Auth0, Azure Entra ID, Ping Identity) to inform product strategy.  
Familiarity with verifiable credentials, FIDO2/passkeys, or emerging zero-trust IAM patterns.