Manager, Identity Engineering (IAM)

Executive-Level Compensation + Annual Bonus + Fully Paid Benefits + Premium Relocation Package + Sign-On Bonus
Build the identity foundation, not just maintain it.
We are partnering with a highly innovative, well-funded technology organization seeking an Identity Engineering Manager to help shape and scale a modern identity and security environment.
This is not a traditional IAM operations role.
The ideal candidate will come from a security engineering, identity engineering, platform engineering, or software engineering background and will be comfortable leading a strong technical team while remaining close to architecture, design decisions, and engineering execution.
This is a true build-and-lead opportunity with significant influence over how authentication, authorization, machine identity, and trust are designed across a highly technical environment.
What You'll Own
• Lead, mentor, and develop a team of identity and security engineers
• Define the strategy and technical roadmap for human, service, and workload identity
• Architect modern authentication and authorization capabilities for applications, services, and machine-to-machine communication
• Drive workload identity using SPIFFE/SPIRE or comparable frameworks
• Lead PKI and certificate lifecycle strategy, including issuance, rotation, and revocation
• Design secure service-to-service communication using mTLS
• Advance Zero Trust architecture across enterprise and cloud-native environments
• Own Microsoft Entra ID strategy, including Conditional Access, PIM, identity governance, and enterprise application integration
• Partner closely with Platform Engineering, DevOps, Security, and IT teams
• Embed identity controls into CI/CD, Infrastructure as Code, and application architecture
• Help build reusable identity services, automation, APIs, and security engineering patterns
• Establish strong governance around privileged access, service accounts, entitlements, and least privilege
• Translate complex identity risks and technical initiatives into clear direction for both engineers and senior leadership
What We're Looking For
• 6+ years of experience in identity, security engineering, or a closely related technical discipline
• 2–3+ years of experience leading or managing engineers
• Strong Microsoft Entra ID / Azure AD engineering experience
• Deep understanding of modern authentication and authorization concepts, including OAuth 2.0, OIDC, JWT, service principals, and machine-to-machine authentication
• Experience with workload identity technologies such as SPIFFE/SPIRE or comparable approaches
• Strong PKI and certificate lifecycle experience
• Experience with mTLS and service-to-service security
• Experience in cloud-native, microservices, containerized, or distributed environments
• Strong understanding of Zero Trust architecture
• Experience integrating identity and security controls into CI/CD and Infrastructure as Code workflows
• Ability to communicate effectively with highly technical engineers, business partners, and executive leadership
Highly Valued
• HashiCorp Vault or comparable secrets-management experience
• Kubernetes and cloud-native security experience
• Python, Go, PowerShell, or other automation/software engineering experience
• Experience building internal authentication, authorization, identity, or security services
• Experience developing reusable APIs, automation, libraries, or engineering frameworks
• Background in highly regulated or security-sensitive environments
• CISSP, CISM, Microsoft Identity, or similar security/identity certifications
Why This Opportunity Stands Out
This role is designed for someone who wants to build, influence, and lead rather than simply administer an existing IAM environment.
You will have the opportunity to help define the architecture, develop the engineering team, and influence how identity and trust are implemented across the organization.
The total rewards package is designed to attract senior engineering talent and includes:
• Executive-level base compensation
• Annual performance bonus
• Fully paid benefits
• 25 days of PTO
• 12 paid holidays
• Strong 401(k) match
• Premium relocation package
• Sign-on bonus
• Paid parking or public transportation
• Daily meal benefit on onsite days
• Flexible hybrid schedule, approximately three days onsite
This is a hybrid leadership position with approximately three days per week onsite. The environment is highly collaborative, and the organization places a strong value on engineering teams working together in person while maintaining flexibility around schedules.
If you are an engineering-minded identity leader who enjoys building modern security capabilities, developing strong technical teams, and solving complex authentication and authorization challenges, this is the kind of opportunity that does not come around often.