Senior Manager, Software Engineering - Identity and Access Management

Momentum; San Francisco (CA); Hybrid; USD 180,000 - 230,000; Full time

Job summary

Leadout Capital is seeking a Senior Manager of Software Engineering to lead the IAM engineering team within Security Infrastructure. You will drive end-to-end ownership of context-aware access services across Salesforce production infrastructure in a hybrid SF/ Bellevue setting.

You will shape the next-gen IAM platform, enforce security policies via real-time context, and partner with SRE and engineering to deliver cloud-agnostic tooling for security, availability, and compliance with NIST/ISO.

Qualifications

• :10+ years of industry experience with at least 3 years leading software engineering teams.
• Experience with major public cloud platforms (AWS/Azure/GCP), Kubernetes, and Infrastructure-as-Code (Terraform).
• Hands-on or team leadership experience building scalable, highly available IAM platforms in Go or Java.
• Working knowledge of authentication standards (SAML, OpenID Connect, OAuth 2.0) and compliance like NIST/ISO 27001.
• Experience in a 24/7 environment with structured change management.

Responsibilities

• Lead and mentor an engineering team that owns services end to end, including 24/7 operations and RC investigations.
• Set goals for provisioning/deprovisioning, PAM, RBAC, and access controls.
• Design, test, deploy, and operate the IAM stack with partners to deliver a unified identity solution.
• Hire, develop, and evaluate reports to drive secure platform improvements.

Skills

People management

Cloud platforms

Kubernetes

Terraform

Go/Java

IAM security

SAML/OIDC/OAuth

Agile

24/7 ops

Security reviews

Tools

Terraform

OpenID Connect

Job description

The Experience

• The Senior Manager, Software Engineering role is part of our Security Infrastructure organization, within the Identity and Access Management (IAM) engineering team. You will lead the team that builds and runs services providing context-aware, just-in-time access and governance across Salesforce production infrastructure.
• You will shape our next generation IAM platform, enforcing security policies based on real-time context. You will partner with Site Reliability and engineering teams to build cloud-agnostic tooling that keeps Salesforce secure and highly available.
• Your near-term focus is how IAM services deploy across first-party and public cloud environments. Your longer-term focus is strengthening our security posture to improve our National Institute of Standards and Technology Cybersecurity Framework (NIST CSF) score.
• This role is based in San Francisco, CA or Bellevue, WA and is eligible for a hybrid work arrangement.

What You’ll Actually Be Doing

• Lead and mentor an engineering team that owns its services end to end, following Agile methodologies, including 24/7 operations and root cause investigations.
• Set goals and deliverables for improving provisioning and deprovisioning, privileged access management, role- and policy-based access control, and access appropriateness.
• Design, test, deploy, and operate the IAM stack with engineering and business partners to deliver one enterprise identity solution for Salesforce.
• Hire, develop, and evaluate direct reports, and drive platforms that continuously assess the security of code and third‑party packages used by Salesforce engineers.

You’re Our Person If...

• You have 10+ years of industry experience, including at least 3 years managing software engineering teams.
• You have hands‑on or team‑leadership experience with a major public cloud platform (AWS, Azure, or Google Cloud Platform), Kubernetes, and Infrastructure-as-Code (Terraform), plus experience building scalable, highly available platforms in Go or Java.
• You have working knowledge of authentication standards (SAML, OpenID Connect, OAuth 2.0), identity lifecycle management, and compliance frameworks such as NIST and ISO 27001.
• You have led complex programs with cross‑functional stakeholders in a matrixed organization, and you have experience in a 24/7 environment with structured change management.

Even Better If...

• You have 5+ years managing identity and access management teams.
• You have experience with Privileged Access Management (PAM) and control plane and data plane access flows in public cloud environments.
• You have experience designing cloud-scale IAM services, including single sign‑on, multi‑factor authentication, and authorization, and with federation protocols such as WS-Federation.
• You have experience driving strategy and using open‑source technologies.