Head of Identity & Access Management

Join our team as the Head of Identity & Access Management. In this senior individual contributor role, you will be responsible for defining and implementing the long-term IAM strategy, assessing and maturing the current-state IDP architecture, and driving all identity systems toward Zero Trust principles. You will also centralize secrets management, design and deliver Privileged Access Management, and collaborate with various teams to deliver access management capabilities. This role offers a comprehensive benefits package, including health insurance, a 401(k) match, a learning stipend, and parental leave.

• Definir la estrategia a largo plazo de gestión de identidad y acceso (IAM), la hoja de ruta y el modelo operativo en toda la empresa y el ecosistema de productos.
• Evaluar y madurar la arquitectura actual del proveedor de identidad (IDP), identificando brechas y conduciendo el camino hacia un diseño resiliente y escalable.
• Automatizar el ciclo de vida completo de la identidad más allá de los procesos tradicionales de IGA (gestión de identidad y acceso).

• 8 - 12+ years in identity engineering, security engineering, or a closely related discipline
• Strong understanding of identity governance, IGA tooling, and role lifecycle management
• Excellent communication and influencing skills - you can make identity concepts accessible to non-technical audiences and drive alignment without authority
• Experience with non-human identity and machine identity management in large-scale environments
• Deep expertise in modern IAM technologies: directories (LDAP/AD), IDPs, federation, and authentication protocols (SAML, OIDC, OAuth 2.0)
• Demonstrated track record of leading complex, cross-functional IAM programs from design through production
• Familiarity with SCIM provisioning and automated IGA workflows
• Hands-on experience with secrets management platforms (e.g., HashiCorp Vault, AWS Secrets Manager, GCP Secret Manager)
• Experience building access controls for AI workloads, agents, or service accounts at scale
• Hands-on architecture or engineering experience in cloud environments (AWS, GCP, or Azure)
• Practical experience implementing Zero Trust identity models and PAM frameworks
• Don’t meet every single requirement? If you’re excited about this role but your past experience doesn’t align perfectly with every qualification in the job description, we encourage you to apply anyway. You may be just the right candidate for this or other roles
• Security certifications such as CISSP, GIAC, or similar
• Solid grasp of compliance frameworks relevant to identity (SOC 2, ISO 27001, NIST, or similar) and experience supporting audit processes