Manager of Identity & Access Management

Reflection AI
New York, San Francisco
Workplace: OnsiteFull timeFunction: CybersecurityExperience: 15+ yearsSkills: ["Threat awareness","Builder mindset","Developer empathy","Pragmatism","Mission alignment"]

Architect and operate a zero-trust identity infrastructure that protects Reflection’s researchers and large-scale compute environments. Lead design of phishing-resistant, hardware-backed authentication and dynamic, context-aware authorization. Build just-in-time credentialing for GPU cluster access across AWS, GCP, and OCI, and replace long-lived secrets with ephemeral certificate-based access. Use policy-as-code (OPA/Rego/Cedar) and automate identity lifecycle via SCIM and API-first tooling while partnering on identity telemetry and detection.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Reflection AI
Reflection AI
2 months ago

Manager of Identity & Access Management

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 1 hour agoStatus: Live

Job Summary

Architect and operate a zero-trust identity infrastructure that protects Reflection’s researchers and large-scale compute environments. Lead design of phishing-resistant, hardware-backed authentication and dynamic, context-aware authorization. Build just-in-time credentialing for GPU cluster access across AWS, GCP, and OCI, and replace long-lived secrets with ephemeral certificate-based access. Use policy-as-code (OPA/Rego/Cedar) and automate identity lifecycle via SCIM and API-first tooling while partnering on identity telemetry and detection.
Location: New York, San Francisco
Workplace: Onsite
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Manager level

Key Responsibilities

  • •Design and implement cloud-native, zero-trust identity architecture using modern IdPs and edge-enforced access networks.
  • •Mandate hardware-backed phishing-resistant authentication globally and eliminate legacy MFA bypass vectors using dynamic least-privilege controls.
  • •Build short-lived, just-in-time credentialing for engineering and research access to GPU clusters across AWS, GCP, and OCI; replace long-lived credentials with ephemeral certificate-based access.
  • •Architect workload and machine identity using SPIFFE/SPIRE or equivalent cryptographic identity frameworks with short-lived tokens for CI/CD and training jobs.
  • •Manage authorization policy as code (OPA/Rego/Cedar), automate identity lifecycle via SCIM/API-first tooling, and partner with detection engineering on identity telemetry and adversary-focused detection logic.

Pay and Benefits

Equity and Bonus:Equity
Perks:Health InsuranceDentalVisionLife InsuranceParental LeavePaid LeaveEquity

Key Requirements

  • •15+ years of experience in identity security, security architecture, or infrastructure engineering in startups, hyperscale cloud, or elite security teams.
  • •Proven track record architecting and operating zero-trust identity infrastructure at scale, including hardware-backed authentication and workload identity.
  • •Hands-on security IAM boundary experience across AWS and GCP and in containerized environments, including Kubernetes identity federation and service account roles.
  • •Experience building and operating privileged access management for large-scale compute, including GPU cluster access in cloud or neocloud contexts.
  • •Software engineering ability to build custom tooling and automation, plus strong cryptographic knowledge of OAuth 2.0, OIDC, SAML, WebAuthn/FIDO2, and PKI.
Experience:15+ years
Skills:Threat awarenessBuilder mindsetDeveloper empathyPragmatismMission alignment
Tech Stack:OktaOIDCOAuth 2.0SAMLWebAuthnFIDO2PKIYubiKeysCloudflare AccessTailscaleWireGuardSPIFFESPIREOpen Policy AgentOPARegoCedarSCIMTerraformPulumi

Eligibility

Work Authorization:Sponsorship available.

Company Brief

Reflection AI
Builds frontier autonomous AI systems focused on autonomous coding agents (product: Asimov) to create organizational superintelligence, founded by former DeepMind/Google researchers and hiring across SF, NYC, London.
Industry: AI & Machine Learning
Company Size: Small (11 to 50 employees)
Growth: Growth Stage Startup
Funding: Series A
Headquarters: San Francisco, United States
Founded: 2024
WebsiteLinkedInGlassdoor