Sr. Product Manager - Falcon Privileged Access (Hybrid)

CrowdStrike Inc.; Arlington (VA); Hybrid; USD 140,000 - 215,000; Full time

Benefits offered by this job

Equity awards

Health insurance

Vacation & holidays

Parental leave

Professional development

Employee networks

Office amenities

Job summary

CrowdStrike is seeking a Senior Product Manager to lead the ongoing transition to continuous identity and modern Privileged Access Management. You will drive strategy to eliminate standing privileges across endpoints, infrastructure, and cloud environments, while delivering best-in-class, seamless user experiences and tight integration with the Falcon platform.

You will work with AI-enabled tools and cross-functional teams to articulate requirements, build prototypes, and align with customers

Qualifications

• Hands-on background in Privileged Access Management or similar domains.
• Understanding of privilege elevation across endpoints, apps, infra and cloud.
• Experience delivering just-in-time access via policy-driven provisioning.
• Knowledge of non-human identities and machine credentials.
• Fluency with SSH/RDP/Kerberos and identity protocols.

Responsibilities

• Define product strategy for modern privileged access and zero standing privileges.
• Deliver intuitive experiences for privilege elevation across platforms.
• Leverage Falcon platform data to inform privileged access decisions.
• Serve as expert for Falcon Privileged Access to internal/external audiences.
• Use AI agents to inform research, analysis, and customer synthesis.

Skills

PAM experience

Identity governance

Just-in-time access

Non-human identity

SSH/RDP/Kerberos

OIDC/SAML protocols

Tools

Claude Code

Lovable

Replit

Job description

USA - Sunnyvale, CA

USA - Boston, MA

USA - Austin, TX

Canada - Toronto

USA - New York, NY

USA - Arlington, VA

USA - Redmond, WA

Full time

R29578

As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. We work on large scale distributed systems, processing almost 3 trillion events per day and this traffic is growing daily. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We're proud to work for a mission-driven company leveraging AI to transform the way we work. CrowdStrikers drive their careers through flexibility and autonomy while also being expected to contribute to a culture of responsible AI adoption, experimentation, and innovation. We use an AI-first mindset as a force multiplier to proactively and continuously accelerate execution, build expertise, uncover insights, and solve complex problems. We’re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.

About the Role:

Privileged access delivers the keys to the kingdom and must be protected. Adversaries don't need to break through a firewall when they can hijack an administrative account, extract a hardcoded secret, or ride an active privileged session. Traditional Privileged Access Management (PAM) solutions rely on heavy, friction-filled processes that vault shared credentials and leave gaps in modern, dynamic environments. Enterprises are modernizing their identity management services, moving beyond traditional PAM and vaults, to just-it-time, continuous identity solutions that enforce contextual policies to deliver access only when appropriate, not before or after.

This role owns CrowdStrike Falcon Privileged Access, focusing on eliminating standing privileges and shrinking the attack surface without hindering productivity. You will define the future of how we enforce Just-In-Time (JIT) access, secure secrets, broker isolated administrative sessions, and integrate privileged context directly with our endpoint and cloud telemetry. It's an area with significant scope for a Sr. Product Manager to disrupt legacy approaches and define a frictionless, AI-native PAM strategy.

This is a hybrid position requiring at least 2 days a week in the office at our NYC, Boston, Arlington or Toronto, Canada office locations.

What You'll Do:

• Own the transition to continuous identity and modern PAM: Define the product strategy to deliver market leading, modern privileged access and zero standing privileges across endpoints, infrastructure, and cloud environments.
• Deliver best-in-class user experiences for privilege elevation: Work with Product Designers to deliver multi-channel user experiences that provide end users and administrators experiences that are in the flow of work, easy to use and ideally completely transparent, operating in the background.
• Leverage the power of the CrowdStrike Falcon platform: Every privileged management decision is better when informed by contextual security and business data about the user, their device, and the target resource. You'll work across product teams to deliver privileged access that leverages the rich security data, threat analysis, security controls, process automation and AI capabilities of the Falcon platform
• Be the expert: Serve as the expert for Falcon Privileged Access to all internal and external parties. You will deliver core messaging, enablement materials, demos, and FAQs. You will also engage directly with internal teams, prospects and current customers to gather requirements, answer questions and convey our product vision and roadmap.
• Use AI agents as a core part of how you work: Research, analysis, spec iteration, and customer synthesis should run through agentic tooling as a default, not an occasional experiment.

What You'll Need:

Privileged Access and Identity Depth:

• Hands-on background in Privileged Access Management, secrets management, identity governance, or a closely adjacent technical domain. You know the friction points of legacy vendors (e.g., CyberArk, BeyondTrust, Delinea, HashiCorp) because you’ve worked with their products and their customers.
• Real understanding of how privilege elevation works across endpoint, applications, infrastructure and cloud; and the difference between assigned administrative roles and effective privileged access.
• Direct product experience with delivering just-in-time access through policy-driven provisioning operations that leverage direct connectors, claim-based authorization, and integrations with third party solutions.
• Real understanding of non-human identity (NHI): service accounts, workload identity, machine credentials, AI agents and secrets rotation. You know why securing machine-to-machine privilege is fundamentally different from human PAM.
• Fluency with core administrative protocols (SSH, RDP, Kerberos, LAPS) and where legacy vaulting and brokering architectures create operational bottlenecks or exploitable risk.
• Fluency with core identity providers (Entra ID, Okta, Ping, and similar) and identity protocols (oAuth, OIDC, SAML) and how they can be leveraged to deliver authentication, MFA and claims-based authorization.

Product Management and Communication:

• 5+ years in product management, with proven experience bringing products from 0 to 1 and scaling them once shipped.
• Comfortable driving ambiguous areas from problem definition to delivered product, without waiting for the spec to be handed to you.
• AI agents are a core part of how you work today: research, analysis, spec iteration, customer synthesis, stakeholder prep. You have formed specific opinions about which models, tools, and patterns work for PM work and which don't.
• Strong instinct for simplification: you've taken something genuinely complex (a privileged access workflow, a session brokering architecture, a JIT approval matrix) and made it usable by someone who doesn't live in it every day.
• Able to mock and iterate on ideas rapidly using Claude Code, Lovable, Replit, or similar tools before anything touches design or engineering. When you come to a product discussion, you bring a working prototype or a concrete visual. Bring examples that show you've done this.
• Able to explain a complex privileged risk concept in plain language to whoever is in front of you, whether that's an engineer, an executive, or a customer's audit team.
• Strong written communication across whatever format the work calls for: a spec, a prompt chain, an eval, a one-pager, a working prototype.
• Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes.

Bonus Points:

• Prior experience with and broad knowledge of related Identity Management areas (SSO, MFA, IGA, SAML, OAuth, ITDR, ISPM, etc.)
• Prior experience successfully migrating customers off legacy PAM solutions.
• Prior work at a CrowdStrike partner, competitor, or large enterprise security team.
• Experience treating compliance and audit requirements (e.g., SOC2, PCI-DSS privileged access controls) as a product design constraint rather than a legal review step.
• Prior work in adversarial thinking, red-teaming, or threat modeling.

Benefits of Working at CrowdStrike:

• Market leader in compensation and equity awards
• Comprehensive physical and mental wellness programs
• Competitive vacation and holidays for recharge
• Paid parental and adoption leaves
• Professional development opportunities for all employees regardless of level or role
• Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections
• Vibrant office culture with world class amenities
• Great Place to Work Certified™ across the globe

CrowdStrike is proud to be an equal opportunity employer. We are committed to fostering a culture of belonging where everyone is valued for who they are and empowered to succeed. We support veterans and individuals with disabilities through our affirmative action program.

CrowdStrike is committed to providing equal employment opportunity for all employees and applicants for employment. The Company does not discriminate in employment opportunities or practices on the basis of race, color, creed, ethnicity, religion, sex (including pregnancy or pregnancy-related medical conditions), sexual orientation, gender identity, marital or family status, veteran status, age, national origin, ancestry, physical disability (including HIV and AIDS), mental disability, medical condition, genetic information, membership or activity in a local human rights commission, status with regard to public assistance, or any other characteristic protected by law. We base all employment decisions--including recruitment, selection, training, compensation, benefits, discipline, promotions, transfers, lay-offs, return from lay-off, terminations and social/recreational programs--on valid job requirements.

If you need assistance accessing or reviewing the information on this website or need help submitting an application for employment or requesting an accommodation, please contact us at [e-mail] for further assistance.

Find out more about your rights as an applicant. (http://www.eeoc.gov/sites/default/files/2023-06/22-088_EEOC_KnowYourRights6.12ScreenRdr.pdf)

CrowdStrike participates in the E-Verify program.

Notice of E-Verify Participation (https://www.e-verify.gov/sites/default/files/everify/posters/EVerifyParticipationPoster.pdf)

Right to Work

CrowdStrike, Inc. is committed to fair and equitable compensation practices. Placement within the pay range is dependent on a variety of factors including, but not limited to, relevant work experience, skills, certifications, job level, supervisory status, and location. The base salary range for this position for all U.S. candidates is $140,000 - $215,000 per year, with eligibility for bonuses, equity grants and a comprehensive benefits package that includes health insurance, 401k and paid time off.

For detailed information about the U.S. benefits package, please click here (http://crowdstrike.wd5.myworkdayjobs.com/crowdstrikecareers/page/a78c53e64ec61001f47d48a4699e0000).

CrowdStrike Canada ULC is committed to equal pay for equal work in its compensation practices. The base salary range for this position in Canada is $150,000 - $200,000 CAD per year + variable/incentive compensation + equity + benefits. A candidate’s salary is determined by various factors including, but not limited to, relevant work experience, skills, certifications and location.

This is Canadian-based employment, and it is expected that all employees maintain legal entitlement to work in Canada. Applicants selected to move forward in the hiring process are subject to background checks, including but not limited to criminal record, credit, and/or reference checks.

CrowdStrike was founded in 2011 to fix a fundamental problem: The sophisticated attacks that were forcing the world’s leading businesses into the headlines could not be solved with existing malware-based defenses. Founder George Kurtz realized that a brand new approach was needed — one that combines the most advanced endpoint protection with expert intelligence to pinpoint the adversaries perpetrating the attacks, not just the malware.

There’s much more to the story of how Falcon has redefined endpoint protection but there’s only one thing to remember about CrowdStrike: We stop breaches.