Head of Identity & Access Management & Zero-Trust Security

Visa Hunt; New York (NY); On-site; USD 260,000 - 380,000; Full time

Benefits offered by this job

Stock options

Health & wellness

Meals in office

Unlimited PTO (US)

Visa sponsorship

Job summary

Reflection is seeking a Head of Identity and Access Management to architect and operate a bleeding-edge, zero-trust identity stack. You will lead the full identity lifecycle across corporate, production, and research environments, ensuring security and developer friendliness.

You will drive phishing-resistant authentication, short-lived credentials for GPU clusters, and policy-driven access using modern IaC and tooling. This is a high-visibility role at the heart of Reflection’s security posture.

Qualifications

• 15+ years in identity security, security architecture, or infrastructure engineering.
• Demonstrated track record of modern, zero-trust identity infrastructure at scale.
• Hands-on experience securing IAM boundaries across AWS, GCP, and Kubernetes.
• Experience building privileged access management for large-scale compute environments.
• Ability to design identity systems balancing strong security with developer usability.

Responsibilities

• Design and implement a cloud-native identity architecture using modern IdPs and zero-trust networks.
• Mandate hardware-backed authentication and phishing-resistant methods globally.
• Develop just-in-time credentialing for GPU clusters across multiple clouds.
• Architect workload identity frameworks and dynamic, short-lived tokens for services.

Skills

Zero-trust

Identity security

OAuth/OIDC/SAML

WebAuthn/FIDO2

Cloud security

Go/Python/Rust

Terraform/Pulumi

Kubernetes IAM

JIT credentials

Policy as Code

Tools

Teleport

HashiCorp Boundary

Okta

Cloudflare Access

Tailscale

OIDC federations

Job description

Reflection is seeking a Head of Identity and Access Management to architect and operate a bleeding-edge, zero-trust identity stack. You will lead the full identity lifecycle across corporate, production, and research environments, ensuring security and developer friendliness.

You will drive phishing-resistant authentication, short-lived credentials for GPU clusters, and policy-driven access using modern IaC and tooling. This is a high-visibility role at the heart of Reflection’s security posture.