IAM Product Owner

KeyBank•Brooklyn, OH

4d•Hybrid

About The Position

The Product Owner for SSO (Single Sign-On) and MFA (Multi-Factor Authentication) is responsible for defining, prioritizing, and delivering identity authentication capabilities that secure enterprise access across workforce and customer platforms. This role owns the product lifecycle for authentication services—including federation, adaptive authentication, and strong authentication controls—ensuring alignment with security, compliance, and user experience objectives.

Requirements

5+ years in Product Owner, Product Manager, or IAM roles.
Strong expertise in SSO and MFA technologies.
Experience in Agile environments.
Understanding of IAM ecosystems.

Nice To Haves

Experience in regulated industries.
Knowledge of SOX and PCI.
Experience with platforms such as Okta, Entra ID, Ping, or SailPoint.

Responsibilities

Define and maintain the product roadmap for SSO and MFA capabilities (e.g., federation, conditional access, password less, adaptive authentication). Align roadmap to enterprise IAM strategy and Zero Trust architecture. Incorporate regulatory requirements (SOX, PCI, FFIEC) into product direction.
Own and prioritize the product backlog for SSO/MFA platforms. Translate business, risk, and compliance needs into actionable user stories. Partner with engineering teams using Agile methodologies. Ensure features meet auditability and traceability requirements.
Drive design and implementation of SSO (SAML, OIDC, OAuth), MFA (push, SMS, hardware tokens, FIDO2), adaptive authentication, and conditional access policies. Ensure integration with identity lifecycle and directory services.
Ensure authentication controls meet internal security standards and regulatory expectations. Partner with risk, audit, and cybersecurity teams. Maintain evidence for MFA enforcement, SSO policies, and access controls.
Act as the bridge between business units, IAM engineering, security architecture, and risk teams. Drive alignment on authentication standards and onboarding priorities.
Lead onboarding of applications to SSO and MFA platforms. Define integration patterns and prioritize high-risk applications.
Track KPIs such as MFA coverage, SSO adoption, and authentication success rates. Drive continuous improvement in security posture and user experience.