IAM Product Manager / Product Owner (Identity & Access Management)

Locations: Fort Mill, SC | New York, NY | San Diego, CA (Hybrid/Onsite)

Job Type: Full-Time / C2C

Experience: 8 15 Years Total | 5+ Years in IAM

We are looking for a high-impact IAM Product Leader to spearhead the design and delivery of next-generation authentication and access capabilities. This role sits at the intersection of Security, Engineering, and User Experience, focusing on building scalable identity solutions-including Passwordless Auth, Adaptive MFA, and Zero Trust frameworks-for both enterprise and customer-facing platforms.

• Strategy & Roadmap: Define and execute a comprehensive IAM roadmap covering the full identity lifecycle, governance, and modern authentication standards.

• Modern Authentication: Lead the transition to Passwordless (FIDO2, Passkeys, Biometrics) and Risk-Based/Adaptive MFA to reduce user friction while hardening security.

• Access Management: Oversee the delivery of SSO, Identity Federation (SAML, OIDC, OAuth2), and complex authorization models (RBAC/ABAC).

• Security & Risk Integration: Collaborate with Risk and Compliance teams to implement dynamic access controls based on device posture, location, and behavioral analytics.

• Agile Product Ownership: Manage the end-to-end product backlog (Epics/User Stories), lead sprint ceremonies, and ensure engineering alignment with "Definition of Done" for security features.

• Vendor Management: Evaluate and integrate industry-leading platforms including Okta, Ping Identity, ForgeRock, Microsoft Entra ID, and CyberArk.

• Experience: 8 15 years in Product Management/Ownership, with at least 5+ years dedicated to IAM platforms.

• Deep Identity Domain Knowledge:

  • Protocols: Expert-level understanding of OAuth 2.0, OpenID Connect (OIDC), SAML, and WebAuthn.

  • Security Models: Proven experience with Zero Trust Architecture and Continuous Authentication.

  • Platforms: Hands-on experience with Okta, Auth0, Ping, or Microsoft Entra ID.

• Methodology: Strong background in Agile/SAFe delivery, translating complex risk requirements into technical engineering backlogs.

• Industry Context: Previous experience in highly regulated sectors-Financial Services, Banking, or FinTech-is strongly preferred.

• Successful adoption of Passwordless/Biometric authentication.

• Measurable reduction in authentication friction and user login drop-off.

• Alignment with NIST, SOC2, PCI, and Zero Trust compliance standards.

• Reduction in identity-related fraud and unauthorized access incidents.