Group Product Manager, AI Agent Security and Authorization

Google; San Jose (CA); On-site; USD 240,000 - 333,000; Full time

Job summary

Google in the United States seeks a proven Product Manager to define and drive its Agentic AI Authorization Strategy, collaborating across AI Research, Cloud, Productivity, and Core Infrastructure.

You will lead zero-trust guardrails for autonomous agents, advance secure token-based access, and partner with engineering leaders to deliver scalable security features in a fast-moving environment.

Qualifications

• Bachelor's degree or equivalent practical experience.
• 10 years of product management experience in security, cloud infrastructure, IAM, enterprise platforms, or AI/ML systems.
• 5 years of experience taking technical products from conception to launch (e.g., ideation to execution, end-to-end, 0 to 1).
• Experience in enterprise security architecture, including zero-trust models, OAuth, service mesh authorization (RPC/HTTP), and capability-based tokens (e.g., Macaroons).
• Experience designing secure AI agent systems, including tool-calling, prompt safety, and exfiltration prevention.
• Experience leading distributed engineering organizations.

Responsibilities

• Define and progress the strategic plans for Google's agent authorization model, balancing high operational velocity with zero-trust security controls across all development and production environments.
• Influence holistic and long-term strategy for agent access control, partnering with identity platform PMs and token specification owners to define how Google restricts agent access using cryptographic tokens and scopes across all services.
• Solve challenges in authorization across service meshes, designing original approaches for routing and inspecting agent-initiated credentials.
• Serve as the domain expert for agentic access security, advising executive directors and Vice President's across AI Research, Cloud, Productivity, and Core Infrastructure on secure agent architectures.
• Drive innovation in security models by replacing manual compliance exceptions with policy frameworks and standardized agent integration software development kits (SDKs), empowering product teams to innovate at AI speed while maintaining company-level security commitments.

Skills

Product management (security)

Security architecture

IAM / zero-trust

AI/ML systems

End-to-end product lifecycle

Distributed engineering leadership

Education

Bachelor's degree or equivalent practical experience

Master's degree in technology or business

Tools

SQL

Distributed databases

Job description

Note: By applying to this position you will have an opportunity to share your preferred working location from the following: San Jose, CA, USA; New York, NY, USA.

Minimum qualifications

• Bachelor's degree or equivalent practical experience.
• 10 years of product management experience in security, cloud infrastructure, identity and access management (IAM), enterprise platforms, or AI/ML systems.
• 5 years of experience taking technical products from conception to launch (e.g., ideation to execution, end-to-end, 0 to 1, etc.).
• Experience in enterprise security architecture, including zero-trust models, OAuth, service mesh authorization (RPC/HTTP), and capability-based tokens (e.g., Macaroons).
• Experience designing secure AI agent systems, including tool-calling, prompt safety, and exfiltration prevention.
• Experience leading distributed engineering organizations.

Preferred qualifications

• Master's degree in a technology or business related field.
• Experience with large-scale enterprise security and authorization infrastructure (e.g., zero-trust proxies, identity-aware access controls, distributed databases, RPC frameworks, and sandboxed developer/agent runtimes).
• Experience building or securing LLM-driven agents, verifiable cryptographic credentials, or automated vulnerability detection platforms.
• Experience designing intuitive, low-toil developer tools and SDKs that make agent security the default, easiest path for engineers.
• Proficiency in SQL and distributed databases with the ability to analyze massive-scale remote procedure call (RPC) log streams to establish quantitative risk metrics and clear product requirements.

About The Job

At Google, we put our users first. The world is always changing, so we need Product Managers who are continuously adapting and excited to work on products that affect millions of people every day.

In this role, you will work cross-functionally to guide products from conception to launch by connecting the technical and business worlds. You can break down complex problems into steps that drive product development.

One of the many reasons Google consistently brings innovative, world-changing products to market is because of the collaborative work we do in Product Management. Our team works closely with creative engineers, designers, marketers, etc. to help design and develop technologies that improve access to the world's information. We're responsible for guiding products throughout the execution cycle, focusing specifically on analyzing, positioning, packaging, promoting, and tailoring our solutions to our users.

Google’s Security and Privacy organization protects Google's users, data, and infrastructure against evolving security threats and compliance risks. Within this organization, the Identity and Access Management team builds the enterprise-grade authorization platforms that govern interactions with Google’s data and services—securing hundreds of thousands of internal identities, distinct workflows, and hundreds of millions of access requests per day. With the rapid adoption of Agentic AI—from AI coding assistants to autonomous team agents and AI-powered production workflows—these numbers are scaling rapidly, presenting novel and complex security challenges.

In this role, you will define and drive Google's Agentic AI Authorization Strategy, long-term security strategy, and collaborate with executive engineering leaders across major business units. You will pioneer zero-trust guardrails for autonomous agents, prevent credential over-provisioning, and deploy next-generation adaptive security systems.

The Core team builds the technical foundation behind Google’s flagship products. We are owners and advocates for the underlying design elements, developer platforms, product components, and infrastructure at Google. These are the essential building blocks for excellent, safe, and coherent experiences for our users and drive the pace of innovation for every developer. We look across Google’s products to build central solutions, break down technical barriers and strengthen existing systems. As the Core team, we have a mandate and a unique opportunity to impact important technical decisions across the company.

Individual pay is determined by factors including job-related skills, experience, and relevant education or training.

US: $240000 - $333000 (USD) + 25% bonus target + equity + benefits

Learn more about benefits at Google.

Responsibilities

• Define and progress the strategic plans for Google's agent authorization model, balancing high operational velocity with zero-trust security controls across all development and production environments.
• Influence holistic and long-term strategy for agent access control, partnering with identity platform PMs and token specification owners to define how Google restricts agent access using cryptographic tokens and scopes across all services.
• Solve challenges in authorization across service meshes, designing original approaches for routing and inspecting agent-initiated credentials.
• Serve as the domain expert for agentic access security, advising executive directors and Vice President's across AI Research, Cloud, Productivity, and Core Infrastructure on secure agent architectures.
• Drive innovation in security models by replacing manual compliance exceptions with policy frameworks and standardized agent integration software development kits (SDKs), empowering product teams to innovate at AI speed while maintaining company-level security commitments.

Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Google's EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know by completing our Accommodations for Applicants form.