Head of Identity & Access Management

The role

You will own identity end-to-end, from IDP architecture to privileged access and secrets management. This senior individual contributor role involves setting direction and driving implementation for identity engineering, security, and compliance.

What you will do

• Define the long-term IAM strategy, roadmap, and operating model.
• Assess and mature the current-state Identity Provider (IDP) architecture.
• Drive all identity systems toward Zero Trust principles.
• Automate the full identity lifecycle.
• Implement and enforce RBAC for human and non-human identities at scale.
• Define and operationalize least-privilege policies.
• Centralize secrets management across cloud and enterprise environments.
• Design and deliver Privileged Access Management (PAM) for admin accounts.
• Implement a scalable access management model for AI agents and bots.
• Collaborate with IT Apps and infrastructure teams to enable SSO.

Required qualifications

• 8 - 12+ years of experience in identity engineering, security engineering, or a closely related discipline.
• Hands-on architecture or engineering experience in cloud environments (AWS, GCP, or Azure).
• Demonstrated track record of leading complex, cross-functional IAM programs from design through production.
• Deep expertise in modern IAM technologies: directories (LDAP/AD), IDPs, federation, and authentication protocols (SAML, OIDC, OAuth 2.0).
• Practical experience implementing Zero Trust identity models and PAM frameworks.
• Strong understanding of identity governance, IGA tooling, and role lifecycle management.
• Hands-on experience with secrets management platforms (e.g., HashiCorp Vault, AWS Secrets Manager, GCP Secret Manager).
• Experience with non-human identity and machine identity management in large-scale environments.
• Experience building access controls for AI workloads, agents, or service accounts at scale.
• Familiarity with SCIM provisioning and automated IGA workflows.
• Excellent communication and influencing skills.
• Bachelor’s degree in a relevant field

Nice to have

• Security certifications such as CISSP, GIAC, or similar.
• Solid grasp of compliance frameworks relevant to identity (SOC 2, ISO 27001, NIST, or similar) and experience supporting audit processes.

Benefits

• Base salary
• Equity in the form of options and/or restricted stock units
• Comprehensive health, dental, vision, life and disability insurance coverage
• 401k retirement benefits with employer match
• Learning and wellness stipends
• Paid time off

About the company

Applied Intuition, Inc. is a Silicon Valley company creating digital infrastructure for physical AI. It services the automotive, defense, trucking, construction, mining and agriculture industries.