Group Product Manager, AI Agent Security and Authorization

Google; New York (NY); On-site; USD 240,000 - 333,000; Full time

Benefits offered by this job

Equity

Bonus target

Benefits

Job summary

Google is seeking a Group Product Manager to lead the Agent Security and Authorization program. You will shape the agent authorization model, collaborate with identity and token teams, and drive zero-trust policies across Google’s services to secure AI-powered workflows.

You will guide cross-functional teams, influence executive stakeholders, and design scalable security architectures for enterprise-grade AI agents.

Qualifications

• Bachelor's degree or equivalent practical experience required.
• 10 years of product management experience in security, cloud infrastructure, IAM, enterprise platforms, or AI/ML.
• 5 years taking technical products from conception to launch.
• Experience in enterprise security architecture including zero-trust, OAuth, service mesh authorization, and tokens.
• Experience designing secure AI agent systems, tool-calling, and prompt safety.
• Experience leading distributed engineering organizations.

Responsibilities

• Define and progress Google's agent authorization model strategy across environments.
• Influence long-term agent access control strategy with identity platforms and token specs.
• Address authorization challenges across service meshes and credential inspection.
• Advise executive leadership on secure agent architectures for AI research, Cloud, and Core Infrastructure.
• Drive policy frameworks and SDKs to enable faster AI product innovation with security.

Skills

Ownership & decision making

Influencing stakeholders

10+ years product management (security

From conception to launch (5+ years)

Distributed engineering leadership

Secure AI agent systems design

Education

Bachelor's degree or equivalent

Master's degree in tech or business

Job description

Group Product Manager, AI Agent Security and Authorization

Google, San Jose, CA, USA; New York, NY, USA.

Advanced

Experience owning outcomes and decision making, solving ambiguous problems and influencing stakeholders; deep expertise in domain.

Note: By applying to this position you will have an opportunity to share your preferred working location from the following: San Jose, CA, USA; New York, NY, USA.

Minimum qualifications:

• Bachelor's degree or equivalent practical experience.
• 10 years of product management experience in security, cloud infrastructure, identity and access management (IAM), enterprise platforms, or AI/ML systems.
• 5 years of experience taking technical products from conception to launch (e.g., ideation to execution, end-to-end, 0 to 1, etc.).
• Experience in enterprise security architecture, including zero-trust models, OAuth, service mesh authorization (RPC/HTTP), and capability-based tokens (e.g., Macaroons).
• Experience designing secure AI agent systems, including tool-calling, prompt safety, and exfiltration prevention.
• Experience leading distributed engineering organizations.

Preferred qualifications:

• Master's degree in a technology or business related field.
• Experience with large-scale enterprise security and authorization infrastructure (e.g., zero-trust proxies, identity-aware access controls, distributed databases, RPC frameworks, and sandboxed developer/agent runtimes).
• Experience building or securing LLM-driven agents, verifiable cryptographic credentials, or automated vulnerability detection platforms.
• Experience designing intuitive, low-toil developer tools and SDKs that make agent security the default, easiest path for engineers.
• Proficiency in SQL and distributed databases with the ability to analyze massive-scale remote procedure call (RPC) log streams to establish quantitative risk metrics and clear product requirements.

About the job

At Google, we put our users first. The world is always changing, so we need Product Managers who are continuously adapting and excited to work on products that affect millions of people every day.

In this role, you will work cross-functionally to guide products from conception to launch by connecting the technical and business worlds. You can break down complex problems into steps that drive product development.

One of the many reasons Google consistently brings innovative, world-changing products to market is because of the collaborative work we do in Product Management. Our team works closely with creative engineers, designers, marketers, etc. to help design and develop technologies that improve access to the world's information. We're responsible for guiding products throughout the execution cycle, focusing specifically on analyzing, positioning, packaging, promoting, and tailoring our solutions to our users.

Google’s Security and Privacy organization protects Google's users, data, and infrastructure against evolving security threats and compliance risks. Within this organization, the Identity and Access Management team builds the enterprise-grade authorization platforms that govern interactions with Google’s data and services—securing hundreds of thousands of internal identities, distinct workflows, and hundreds of millions of access requests per day. With the rapid adoption of Agentic AI—from AI coding assistants to autonomous team agents and AI-powered production workflows—these numbers are scaling rapidly, presenting novel and complex security challenges.

In this role, you will define and drive Google's Agentic AI Authorization Strategy, long-term security strategy, and collaborate with executive engineering leaders across major business units. You will pioneer zero-trust guardrails for autonomous agents, prevent credential over-provisioning, and deploy next-generation adaptive security systems.

The Core team builds the technical foundation behind Google’s flagship products. We are owners and advocates for the underlying design elements, developer platforms, product components, and infrastructure at Google. These are the essential building blocks for excellent, safe, and coherent experiences for our users and drive the pace of innovation for every developer. We look across Google’s products to build central solutions, break down technical barriers and strengthen existing systems. As the Core team, we have a mandate and a unique opportunity to impact important technical decisions across the company.

Individual pay is determined by factors including job-related skills, experience, and relevant education or training.

US: $240000 - $333000 (USD) + 25% bonus target + equity + benefits

Learn more about benefits at Google.

Responsibilities

• Define and progress the strategic plans for Google's agent authorization model, balancing high operational velocity with zero-trust security controls across all development and production environments.
• Influence holistic and long-term strategy for agent access control, partnering with identity platform PMs and token specification owners to define how Google restricts agent access using cryptographic tokens and scopes across all services.
• Solve challenges in authorization across service meshes, designing original approaches for routing and inspecting agent-initiated credentials.
• Serve as the domain expert for agentic access security, advising executive directors and Vice President's across AI Research, Cloud, Productivity, and Core Infrastructure on secure agent architectures.
• Drive innovation in security models by replacing manual compliance exceptions with policy frameworks and standardized agent integration software development kits (SDKs), empowering product teams to innovate at AI speed while maintaining company-level security commitments.

Information collected and processed as part of your Google Careers profile, and any job applications you choose to submit is subject to Google's Applicant and Candidate Privacy Policy.

Google is proud to be an equal opportunity and affirmative action employer. We are committed to building a workforce that is representative of the users we serve, creating a culture of belonging, and providing an equal employment opportunity regardless of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition (including breastfeeding), expecting or parents-to-be, criminal histories consistent with legal requirements, or any other basis protected by law. See also Google's EEO Policy, Know your rights: workplace discrimination is illegal, Belonging at Google, and How we hire.

If you have a need that requires accommodation, please let us know by completing our Accommodations for Applicants form.

Google is a global company and, in order to facilitate efficient collaboration and communication globally, English proficiency is a requirement for all roles unless stated otherwise in the job posting.

To all recruitment agencies: Google does not accept agency resumes. Please do not forward resumes to our jobs alias, Google employees, or any other organization location. Google is not responsible for any fees related to unsolicited resumes.

Equity is granted exclusively and discretionarily by Alphabet Inc. on the basis of an agreement concluded between you and Alphabet Inc. Alphabet Inc. is your sole contractual partner with respect to equity grants. GSU grants are not guaranteed, are discretionary, are subject to approval by the Alphabet Inc. board of directors or its delegate, the terms of the relevant Alphabet Inc. stock plan, and your grant agreement. They have no impact on statutory payments. Current or past grants do not confer an acquired right.