Engineering Manager, Identity & Access Platform

Role overview

Lead the engineering team responsible for customer identity and access capabilities used across multiple financial products. Set the technical direction for authentication, authorization, and emerging agent identities while managing and developing engineers. This is a hands-on leadership role that combines architecture and delivery decisions with coaching, design reviews, production support, and occasional implementation.

Responsibilities - Own the platform’s architecture, technical vision, and roadmap for identity and access capabilities. - Manage, coach, hire, and develop backend and frontend engineers, including helping senior contributors grow into technical leaders. - Guide system design, review critical code, troubleshoot production issues, join incident response, and build prototypes when useful. - Work with security, product, onboarding, risk, and engineering partners to prioritize requests and explain trade-offs. - Lead planning, scoping, migrations, cutovers, rollback preparation, and delivery updates. - Improve engineering practices and operational readiness for a platform relied on by other teams.

Requirements - At least three years managing software engineers, including hiring, performance management, coaching, and development of senior contributors. - Experience leading a team through a significant migration, re-platforming effort, or architectural change. - Deep experience building identity or authorization systems at scale; the source emphasizes customer identity, access control, and platform engineering. - Ability to make and communicate architecture decisions, balance security and product needs, and stay engaged with technical work.

Nice to have - Experience with identity for AI agents, delegated authorization, workload or service identities, or other non-human identities, including bounded permissions, credential lifetimes, revocation, and auditability. - Background in financial technology, payments, crypto, or regulated environments involving entitlements and operational controls. - Familiarity with identity standards and tools such as token exchange, MCP authorization, SPIFFE/SPIRE, workload identity federation, agent registries, OPA, or Cedar. - Experience with Java or Kotlin services, TypeScript applications, or geographically distributed teams.

Benefits and work setup - The listed base pay range is $195,000–$236,667; compensation may vary by location, experience, skills, and other factors. - The listing describes a remote work option.