Engineering Product Manager

020 Cisco Systems, Inc.; North Carolina; On-site; USD 131,000 - 175,000; Full time

Job summary

Cisco Systems, Inc. is seeking an Engineering Product Manager to advance access controls within our IAM/IGA system. You will craft, deploy, and optimize policies using PlainID and SailPoint to ensure secure, scalable access across enterprise systems.

You will lead policy design, release planning, and CI/CD improvements while collaborating with IT, security, and business teams to meet evolving security requirements.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Information Systems, or related field or equivalent work experience.
• 12+ years of experience in cybersecurity with IGA/RBAC/ABAC/PBAC understanding.
• Demonstrated experience with SailPoint, PlainID or similar PBAC systems; knowledge of XACML or REGO.
• Experience with IAM tech and policy-based access control mechanisms.

Responsibilities

• Develop roadmap for onboarding enterprise applications onto the central IAM/IGA platform.
• Plan feature delivery and platform initiatives (SoD checks, bulk approvals; infra, CI/CD improvements).
• Ensure platform scalability for future growth and integrated applications.
• Design and manage access control policies with PlainID to meet business needs.
• Create and manage release schedule for the IGA platform and major/minor/patch releases.
• Lead release planning meetings and Go/No-Go decisions with customers.
• Prioritize CI/CD improvements to speed and reliability.
• Bridge IT, security, and business teams to translate requirements into policy solutions.
• Maintain policy integrity and availability of access control services.

Skills

IAM concepts

RBAC

ABAC

PBAC

Policy languages

Education

Bachelor's or Master’s degree

Tools

PlainID

SailPoint

Active Directory

Snowflake

Airflow

Job description

The application window is expected to close on: 10/26/2026

Who We Are

Today’s demanding business environment is more than that – it’s a period of disruption between the pandemic, global business change, and internal process complexity. For us to focus on simplicity and the best customer experience, we need great talent and the right abilities to be successful. Cisco is transforming to become the world's leading security company. As part of this initiative, our Security Operations & Technology organization is adopting best-in-class tools, standards, and practices. Identity is at the heart of this transformation, making this an exciting time to join our team. Security Operations Team is changing the way we run Cisco’s Identity and Access management by improving the power of technology, the best of business processes. Together, we will Reinvent the Cisco experience. Please join us and make this journey together!

What You’ll Do

We are looking for a dedicated Engineering Product Manager to join our team in developing and refining access controls within our Authorization and Identity Governance system. The ideal candidate will specialize in crafting, deploying, and optimizing policies within the Authorization platforms like PlainID, SailPoint, Active Directory, SnowFlake to ensure secure, efficient, and scalable access management across our enterprise systems.

Key Responsibilities

• Develop roadmap for onboarding enterprise applications onto the central IAM/IGA platform.
• Develop roadmap that includes both feature delivery (e.g., Segregation of Duties (SoD) checks, Training Mandates, Bulk Approvals) and platform initiatives (e.g., Deploying and Managing the underlying infra, improving CICD processes).
• Planning for the platform's scalability to handle future growth in users and integrated applications.
• Design, implement, and manage sophisticated access control policies within PlainID to meet our dynamic business requirements.
• Create and manage the release schedule for the IGA platform, including major, minor, and patch releases.
• Manage the release planning meetings and formal Go/No-Go meetings with all customers.
• Manage the CI/CD pipeline as a product, prioritizing work to improve its speed and reliability.
• Work closely with IT, security teams, and business customers to gather requirements and translate business needs into effective policy solutions.
• Ensure the integrity, confidentiality, and availability of information accessed through policy enforcement.
• Perform ongoing maintenance, updates, and refinements to existing policies to adapt to changing security landscapes and business needs.
• Solve policy-related issues, access provisioning issues providing timely and accurate resolution to ensure uninterrupted access control services.
• Document policy configurations and changes, maintaining clear and comprehensive records for audit and compliance purposes.
• Engage in knowledge sharing and standards within the team to foster a culture of continuous improvement in policy management.
• Provide technical expertise and guidance in the area of access control, including role-based access control (RBAC), attribute-based access control (ABAC), PBAC and IGA.
• Serve as the authority for PlainID and SailPoint IGA within the organization, offering training and support to IT staff and end-users.

Who You’ll Work With

The Security and Trust organization is passionate about technology not just to be innovative, but we transform innovation into value for Cisco. We are responsible for delivering world-class capabilities that enable Cisco employees, Customers and Partners to transform their experience. Our customers are not just industry leaders but are redefining the world through the empowerment of technology - with Cisco by their side. On a daily & weekly basis you will interact with key business partners in various multi-functional teams within Security and Trust Office, Infrastructure, Legal, Business Operations, and Customer/Partner Experience teams. You will work with the Business and Technical Architecture Groups, Product Owners, Development Team leads, Multi-functional teams.

Who You Are

A hardworking and experienced professional who enjoys digging into complicated problems and exploring details of technical implementations. Someone who has a clear passion for solving functional challenges using technology and thrives in bringing clarity to ambiguous situations. A standout colleague capable of influencing within and outside of the team, as well as being an agent for change and transformation. Someone with an ability to take the lead in developing business solutions and clearly communicate complex concepts. Our minimum requirements are as follows: Bachelor’s or Master’s degree in Computer Science, Information Systems, or a related field, or equivalent work experience. 12+ years of experience in cybersecurity domain with IGA, RBAC, ABAC, PBAC understanding. Demonstrated experience with SailPoint, PlainID or similar PBAC systems, with a solid understanding of policy languages such as XACML or REGO. Demonstrated experience with SnowFlake, AirFlow, SFDC, Google BigQuery, Mulesoft, REST, OpenShift, Dockers, Kubernates, AWS. Familiarity with IAM concepts and technologies, with a focus on policy-based access control mechanisms. Good background in integrating IAM solutions with enterprise systems such as ERP, CRM etc. Experience with directory services (e.g., LDAP, Active Directory) and federated identity protocols (e.g., SAML, OpenID Connect, OAuth). Familiarity with programming and scripting languages (e.g., Java, Python, PowerShell). Ability to analyze complex systems and data to develop effective access control solutions. Strong problem-solving, analytical, and critical thinking skills. Good communication skills, with the ability to collaborate effectively across diverse teams and customers. Knowledge of security standards and compliance frameworks relevant to access management.

Our Minimum Requirements

• Bachelor’s or Master’s degree in Computer Science, Information Systems, or a related field, or equivalent work experience.
• 12+ years of experience in cybersecurity domain with IGA, RBAC, ABAC, PBAC understanding.
• Demonstrated experience with SailPoint, PlainID or similar PBAC systems, with a solid understanding of policy languages such as XACML or REGO.
• Demonstrated experience with SnowFlake, AirFlow, SFDC, Google BigQuery, Mulesoft, REST, OpenShift, Dockers, Kubernates, AWS.
• Familiarity with IAM concepts and technologies, with a focus on policy-based access control mechanisms.
• Good background in integrating IAM solutions with enterprise systems such as ERP, CRM etc.
• Experience with directory services (e.g., LDAP, Active Directory) and federated identity protocols (e.g., SAML, OpenID Connect, OAuth).
• Familiarity with programming and scripting languages (e.g., Java, Python, PowerShell).
• Ability to analyze complex systems and data to develop effective access control solutions.
• Strong problem-solving, analytical, and critical thinking skills.
• Good communication skills, with the ability to collaborate effectively across diverse teams and customers.
• Knowledge of security standards and compliance frameworks relevant to access management.

Why Cisco #WeAreCisco

where each person is unique, but we bring our talents to work as a team and make a difference powering an expansive future for all. We adopt digital, and help our customers implement change in their digital businesses. Some may think we’re “old” (36 years strong) and only about hardware, but we’re also a software company. And a security company. We even invented an intuitive network that adapts, predicts, learns and protects. No other company can do what we do – you can’t put us in a box! But “Digital Transformation” is an empty buzz phrase without a culture that allows for innovation, creativity, and yes, even failure (if you learn from it.) Day to day, we focus on the give and take. We give our best, give our egos a break, and give of ourselves (because giving back is built into our DNA.) We take accountability, bold steps, and take difference to heart. Because without diversity of thought and a dedication to equality for all, there is no moving forward. So, you have colorful hair? Don’t care. Tattoos? Show off your ink. Like polka dots? That’s cool. Pop culture geek? Many of us are. Passion for technology and world changing? Be you, with us!

Message to applicants applying to work in the U.S. and/or Canada

The starting salary range posted for this position is $130,500.00 to $175,000.00 and reflects the projected salary range for new hires in this position in U.S. and/or Canada locations, not including incentive compensation*, equity, or benefits. Individual pay is determined by the candidate's hiring location, market conditions, job-related skillset, experience, qualifications, education, certifications, and/or training. The full salary range for certain locations is listed below. For locations not listed below, the recruiter can share more details about compensation for the role in your location during the hiring process. U.S. employees are offered benefits, subject to Cisco’s plan eligibility rules, which include medical, dental and vision insurance, a 401(k) plan with a Cisco matching contribution, paid parental leave, short and long-term disability coverage, and basic life insurance. Please see the Cisco careers site to discover more benefits and perks. Employees may be eligible to receive grants of Cisco restricted stock units, which vest following continued employment with Cisco for defined periods of time. U.S. employees are eligible for paid time away as described below, subject to Cisco’s policies: 10 paid holidays per full calendar year, plus 1 floating holiday for non-exempt employees 1 paid day off for employee’s birthday, paid year-end holiday shutdown, and 4 paid days off for personal wellness determined by Cisco Non-exempt employees** receive 16 days of paid vacation time per full calendar year, accrued at rate of 4.92 hours per pay period for full-time employees Exempt employees participate in Cisco’s flexible vacation time off program, which has no defined limit on how much vacation time eligible employees may use (subject to availability and some business limitations) 80 hours of sick time off provided on hire date and each January 1st thereafter, and up to 80 hours of unused sick time carried forward from one calendar year to the next Additional paid time away may be requested to deal with critical or emergency issues for family members Optional 10 paid days per full calendar year to volunteer For non-sales roles, employees are also eligible to earn annual bonuses subject to Cisco’s policies. Employees on sales plans earn performance-based incentive pay on top of their base salary, which is split between quota and non-quota components, subject to the applicable Cisco plan. For quota-based incentive pay, Cisco typically pays as follows: .75% of incentive target for each 1% of revenue attainment up to 50% of quota; 1.5% of incentive target for each 1% of attainment between 50% and 75%; 1% of incentive target for each 1% of attainment between 75% and 100%; and Once performance exceeds 100% attainment, incentive rates are at or above 1% for each 1% of attainment with no cap on incentive compensation. For non-quota-based sales performance elements such as strategic sales objectives, Cisco may pay 0% up to 125% of target. Cisco sales plans do not have a minimum threshold of performance for sales incentive compensation to be paid. The applicable full salary ranges for this position, by specific state, are listed below: New York City Metro Area: $161,400.00 - $241,100.00 Non-Metro New York state & Washington state: $141,500.00 - $214,400.00