Reflection AI

1 week ago

Manager of Identity & Access Management

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 4 hours agoStatus: Live

Job Summary

Architect and operate a zero-trust identity infrastructure that protects Reflection’s researchers and large-scale compute environments. Lead design of phishing-resistant, hardware-backed authentication and dynamic, context-aware authorization. Build just-in-time credentialing for GPU cluster access across AWS, GCP, and OCI, and replace long-lived secrets with ephemeral certificate-based access. Use policy-as-code (OPA/Rego/Cedar) and automate identity lifecycle via SCIM and API-first tooling while partnering on identity telemetry and detection.

Location: New York, San Francisco

Workplace: Onsite

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Manager level

Key Responsibilities

•Design and implement cloud-native, zero-trust identity architecture using modern IdPs and edge-enforced access networks.
•Mandate hardware-backed phishing-resistant authentication globally and eliminate legacy MFA bypass vectors using dynamic least-privilege controls.
•Build short-lived, just-in-time credentialing for engineering and research access to GPU clusters across AWS, GCP, and OCI; replace long-lived credentials with ephemeral certificate-based access.
•Architect workload and machine identity using SPIFFE/SPIRE or equivalent cryptographic identity frameworks with short-lived tokens for CI/CD and training jobs.
•Manage authorization policy as code (OPA/Rego/Cedar), automate identity lifecycle via SCIM/API-first tooling, and partner with detection engineering on identity telemetry and adversary-focused detection logic.

Pay and Benefits

Equity and Bonus:Equity

Perks:Health InsuranceDentalVisionLife InsuranceParental LeavePaid LeaveEquity

Key Requirements

•15+ years of experience in identity security, security architecture, or infrastructure engineering in startups, hyperscale cloud, or elite security teams.
•Proven track record architecting and operating zero-trust identity infrastructure at scale, including hardware-backed authentication and workload identity.
•Hands-on security IAM boundary experience across AWS and GCP and in containerized environments, including Kubernetes identity federation and service account roles.
•Experience building and operating privileged access management for large-scale compute, including GPU cluster access in cloud or neocloud contexts.
•Software engineering ability to build custom tooling and automation, plus strong cryptographic knowledge of OAuth 2.0, OIDC, SAML, WebAuthn/FIDO2, and PKI.

Experience:15+ years

Skills:Threat awarenessBuilder mindsetDeveloper empathyPragmatismMission alignment

Tech Stack:OktaOIDCOAuth 2.0SAMLWebAuthnFIDO2PKIYubiKeysCloudflare AccessTailscaleWireGuardSPIFFESPIREOpen Policy AgentOPARegoCedarSCIMTerraformPulumi

Eligibility

Work Authorization:Sponsorship available.

Company Brief

Reflection AI

Builds frontier autonomous AI systems focused on autonomous coding agents (product: Asimov) to create organizational superintelligence, founded by former DeepMind/Google researchers and hiring across SF, NYC, London.

Industry: AI & Machine Learning

Company Size: Small (11 to 50 employees)

Growth: Growth Stage Startup

Funding: Series A

Headquarters: San Francisco, United States

Founded: 2024

Website LinkedIn Glassdoor

Loading job details...

Preparing the role view and application actions.

Reflection AI

1 week ago

Manager of Identity & Access Management

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 4 hours agoStatus: Live

Job Summary

Location: New York, San Francisco

Workplace: Onsite

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Manager level

Key Responsibilities

•Design and implement cloud-native, zero-trust identity architecture using modern IdPs and edge-enforced access networks.
•Mandate hardware-backed phishing-resistant authentication globally and eliminate legacy MFA bypass vectors using dynamic least-privilege controls.
•Build short-lived, just-in-time credentialing for engineering and research access to GPU clusters across AWS, GCP, and OCI; replace long-lived credentials with ephemeral certificate-based access.
•Architect workload and machine identity using SPIFFE/SPIRE or equivalent cryptographic identity frameworks with short-lived tokens for CI/CD and training jobs.
•Manage authorization policy as code (OPA/Rego/Cedar), automate identity lifecycle via SCIM/API-first tooling, and partner with detection engineering on identity telemetry and adversary-focused detection logic.

Pay and Benefits

Equity and Bonus:Equity

Perks:Health InsuranceDentalVisionLife InsuranceParental LeavePaid LeaveEquity

Key Requirements

•15+ years of experience in identity security, security architecture, or infrastructure engineering in startups, hyperscale cloud, or elite security teams.
•Proven track record architecting and operating zero-trust identity infrastructure at scale, including hardware-backed authentication and workload identity.
•Hands-on security IAM boundary experience across AWS and GCP and in containerized environments, including Kubernetes identity federation and service account roles.
•Experience building and operating privileged access management for large-scale compute, including GPU cluster access in cloud or neocloud contexts.
•Software engineering ability to build custom tooling and automation, plus strong cryptographic knowledge of OAuth 2.0, OIDC, SAML, WebAuthn/FIDO2, and PKI.

Experience:15+ years

Skills:Threat awarenessBuilder mindsetDeveloper empathyPragmatismMission alignment

Tech Stack:OktaOIDCOAuth 2.0SAMLWebAuthnFIDO2PKIYubiKeysCloudflare AccessTailscaleWireGuardSPIFFESPIREOpen Policy AgentOPARegoCedarSCIMTerraformPulumi

Eligibility

Work Authorization:Sponsorship available.

Company Brief

Reflection AI

Industry: AI & Machine Learning

Company Size: Small (11 to 50 employees)

Growth: Growth Stage Startup

Funding: Series A

Headquarters: San Francisco, United States

Founded: 2024

Website LinkedIn Glassdoor