Description

Lead enterprise identity strategy and platform architecture for cloud identity, directory services, and modern authentication standards. Architect centralized token issuance and validation services for developer and CLI workflows, ensuring consistent trust across device and session contexts. Define reference architectures for secure authentication across browser, CLI, and agentic workflows, establishing agent identities for robust access control and auditability. Implement advanced identity security controls including Conditional Access policies, Privileged Identity Management (PIM), and risk-based authentication. Scale device management and identity governance systems to support AI-powered operations while ensuring reliability and compliance. Partner with security, infrastructure, and product teams to drive architecture decisions and operational ownership.

Responsibilities

• Define and implement reference architectures for secure authentication across CLI, browser, and agentic workflows.
• Architect and stand up a centralized token issuance and validation service for developer and CLI workflows.
• Establish agent identities within the identity platform to enable robust access control and auditability for automated workflows.
• Build and implement advanced identity security controls such as Conditional Access policies, PIM, and risk-based authentication.
• Scale device management and identity governance systems to meet the demands of AI-powered operations.

Required Skills

• Bachelor's degree or Master's degree or equivalent experience in Computer Science or a related field.
• Over 12+ years of experience in platform or infrastructure engineering.
• Extensive knowledge in authentication, authorization, and identity systems including OAuth 2.0, OIDC, and SAML.
• Experience with federated identity standards and device attestation.
• Proven experience crafting and leading identity or access management platforms within large-scale organizations.
• Solid understanding of Zero Trust architecture, identity-based attack techniques, and modern IAM controls.
• Experience securing automated or computer-controlled workflows, including service-to-service identity and non-human access patterns.
• Excellent written and verbal communication skills; comfortable driving architecture decisions across senior and executive audiences.

Key Skills

Education

Bachelor's degree