Chief IAM Architect — Zero-Trust & Cloud Security

Reflection AI; New York (NY); On-site; USD 180,000 - 280,000; Full time

Benefits offered by this job

Top-tier compensation

Stock options

Health & wellness

Meals in office

Parental leave

Unlimited PTO in US

Visa sponsorship

Team off-sites

Job summary

Reflection AI is seeking a Head of Identity and Access Management to architect, build, and operate a bleeding-edge, zero-trust identity platform for researchers and vast compute environments. You will mandate hardware-backed authentication, design just-in-time credentialing for GPU clusters, and implement dynamic, context-aware access controls across cloud providers.

The role requires deep cryptographic knowledge, cloud-native skills, and software engineering ability to build custom tooling

Qualifications

• 15+ years of experience in identity security, security architecture, or infrastructure engineering.
• Experience with zero-trust identity at scale including hardware-backed authentication.
• Experience securing IAM across AWS, GCP; Kubernetes identity federation.
• Experience with privileged access management for large-scale compute environments.
• Ability to design security that balances usability and security.

Responsibilities

• Design and implement a cloud-native identity architecture with zero-trust access.
• Enforce phishing-resistant authentication globally using hardware-backed methods.
• Build just-in-time credentialing for GPU clusters across cloud providers.
• Develop workload and machine identity frameworks (SPIFFE/SPIRE).
• Define policy as code and integrate into dev workflows.
• Automate provisioning/deprovisioning and detect identity threats.

Skills

Identity security architecture

Zero-trust identity

Cloud security

Cryptography fundamentals

Go/Python/Rust

Hardware-backed authentication

Detection telemetry

Tools

Okta

OIDC/OAuth 2.0

WebAuthn/FIDO2

SAML

Kubernetes

Terraform

Pulumi

Teleport

HashiCorp Boundary

SPIFFE/SPIRE

Job description

Reflection AI is seeking a Head of Identity and Access Management to architect, build, and operate a bleeding-edge, zero-trust identity platform for researchers and vast compute environments. You will mandate hardware-backed authentication, design just-in-time credentialing for GPU clusters, and implement dynamic, context-aware access controls across cloud providers.

The role requires deep cryptographic knowledge, cloud-native skills, and software engineering ability to build custom tooling