Senior Product Manager, Identity & Authentication Platform BU

Role Summary

Identity infrastructure is not glamourware. It doesn't get standing ovations at company all‑hands, but it is the thing every product in the portfolio depends on, and when it breaks, everyone knows. If you are a product manager who finds that genuinely interesting, read on.

Responsibilities

• Own the product strategy and roadmap for core authentication flows: SAML 2.0, OIDC/OAuth 2.0 with PKCE, MFA enforcement, token lifecycle management, and multi‑IdP federation.
• Make product decisions that sit at the intersection of system design, security architecture, and developer experience, working directly with senior engineers on protocol choices and infrastructure trade‑offs.
• Drive adoption of platform identity capabilities across internal engineering teams through influence, moving products toward modern API patterns and away from legacy integration surfaces.
• Use AI coding tools (Claude Code, Cursor, or similar) to prototype ideas and validate concepts before you pitch them; this is expected, not optional.
• Track the IAM standards landscape, including passkeys, FIDO2, SCIM, zero‑trust, and verifiable credentials, and use that knowledge to sharpen product direction.
• Translate complex authentication concepts (JWT structures, SAML assertions, PKCE handshakes) into clear specs, user stories, and prioritized backlogs for audiences from engineers to executives.

Qualifications

• Hands‑on knowledge of SAML 2.0, OIDC, OAuth 2.0, PKCE, JWT, MFA/TOTP, and SSO federation; you've made production decisions with these, not just read about them.
• Experience owning IAM products, developer‑facing identity platforms, or authentication infrastructure in a SaaS environment.
• 3 – 7 years of product management experience on technically complex platform or infrastructure products.
• Comfort with access control concepts: RBAC, ABAC, scopes, entitlements, and user provisioning and deprovisioning flows.
• Experience in a platform or shared services context where your customers are internal engineering teams.
• Familiarity with enterprise IdP ecosystems such as Okta, Azure AD, Ping Identity, or Google Workspace.
• An active AI‑native work style; you already use AI tools to investigate systems, prototype integrations, and close the feedback loop with engineering faster.

Preferred Qualifications

• Exposure to GovCloud or regulated multi‑region authentication environments.
• Experience conducting technical teardowns of identity platforms (Auth0, Azure Entra ID, Ping Identity) to inform product strategy.
• Familiarity with verifiable credentials, FIDO2/passkeys, or emerging zero‑trust IAM patterns.

Compensation

Pay Range: $131,000 – $164,000 CAD

Work Arrangement

Hybrid work model; if you are within commuting distance to one of our office locations, you will be expected to work onsite at least 50% of the time .

Benefits

• Creativity is ingrained in our culture. We are innovative collaborators by nature and thrive in exploring how things can be different both in our internal processes and to help our clients.
• We care about our people. Diligent offers a flexible work environment, global days of service, comprehensive health benefits, meeting free days, generous time off policy and wellness programs to name a few.
• We have teams all over the world. Though headquartered in New York City, we have office hubs in Washington D.C., Vancouver, London, Galway, Budapest, Munich, Bengaluru, Singapore, and Sydney.
• Diversity is important to us. Growing, maintaining and promoting a diverse team is a top priority for us. We foster and encourage diversity through our Employee Resource Groups and provide access to resources and education to support the education of our team, facilitate dialogue, and foster understanding.

EEO Statement

We are proud to be an equal opportunity employer. We do not discriminate based on race, color, religious creed, sex, national origin, ancestry, citizenship status, pregnancy, childbirth, physical disability, mental disability, age, military status, protected veteran status, marital status, registered domestic partner or civil union status, gender (including sex stereotyping and gender identity or expression), medical condition (including, but not limited to, cancer related or HIV/AIDS related), genetic information, or sexual orientation in accordance with applicable federal, state and local laws. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Diligent's EEO Policy and Know Your Rights. We are committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, you may contact us at View email address on ca.talent.com.