Enterprise Security Leader — Architecture & Strategy

Strava; San Francisco (CA); Hybrid; USD 180,000 - 240,000; Full time

Job summary

Strava is seeking a Senior Manager of Enterprise Security Engineering to own the corporate security program and roadmap. You will report to the CISO and lead a lean engineering team responsible for securing Strava's internal environment while collaborating across business units to enable secure growth.

This highly technical leadership role involves defining long-term strategy, balancing internal work with partner-delivered capabilities, and making risk-based decisions that protect systems

Qualifications

• Over 10 years designing, building and operating enterprise security programs in cloud-first environments.
• 3+ years leading security engineering teams with hands-on engagement.
• Strong ability to influence executives with risk-based decisions.
• Deep expertise in MFA, SSO, OAuth, device compliance, and fleet management across macOS/Windows.
• Experience with Okta, Intune, Jamf, ZTNA, Sailpoint, GitHub.

Responsibilities

• Own and execute the enterprise security roadmap for corporate identity, endpoint, email, network, and SaaS security.
• Lead a small team of engineers, fostering technical excellence and ownership.
• Stay hands-on by designing, building, and configuring security capabilities when needed.
• Develop operating model balancing in-house work with strategic partners.
• Architect and evolve IAM platform including SSO, MFA, PAM, identity governance, automation, and Zero Trust.

Skills

Leadership

Security Architecture

Cloud Security

Identity & Access

OAuth

MFA

Vendor Management

Stakeholder mgmt

Communication

Tools

Okta

Intune

Jamf

ZTNA

Sailpoint

Github

GWS

Slack

Job description

Strava is seeking a Senior Manager of Enterprise Security Engineering to own the corporate security program and roadmap. You will report to the CISO and lead a lean engineering team responsible for securing Strava's internal environment while collaborating across business units to enable secure growth.

This highly technical leadership role involves defining long-term strategy, balancing internal work with partner-delivered capabilities, and making risk-based decisions that protect systems