Lead Product Manager – Identity & Access Management
About The Position
Trimble is seeking a technically fluent Lead Product Manager to lead the strategy and execution of its Identity and Access Management (IAM) platform. The role owns the Organizations and multi-tenancy model that supports enterprise customer trust and cross-product integration, as well as the broader roadmap for IAM capabilities, including authorization and provisioning. The position leads product management for SCIM 2.0 user provisioning and deprovisioning, directory integrations, and identity federation and single sign-on. It partners with engineering to define data models, API contracts, authentication flows, and system architecture, and works with security, legal, compliance, enterprise sales, and customer success to deliver secure, scalable capabilities that meet enterprise needs. The role is based in Westminster, Colorado, with an in-office schedule of four days per week and one day working from home. Travel is 10%.
Requirements
- At least 5 years of product management experience, with a deep focus on IAM, developer infrastructure, or enterprise SaaS.
- Expert-level knowledge of SCIM 2.0, SAML 2.0, OIDC, and OAuth 2.0 identity protocols.
- A proven track record defining complex multi-tenancy models and organization structures for enterprise scale.
- Technical fluency in defining API documentation, authentication flows, and system architecture diagrams.
Nice To Haves
- Experience building enterprise-grade IAM from the ground up or working with providers such as Okta and Google Workspace.
- Knowledge of Zero Trust architecture principles or Privileged Access Management (PAM).
- Professional security certifications such as CIAM or CISSP.
Responsibilities
- Own the Organizations concept and multi-tenancy model, including the grouping of users, teams, settings, and resources under enterprise tenants.
- Contribute to organization hierarchy models, including nested sub-organizations, delegated administration, and per-organization policy overrides.
- Manage organization-level IAM configuration experiences, including domain verification and claiming, enforced SSO, member join flows, and seat management.
- Ensure organization-scoped roles and permissions are clearly modeled and consistently enforced across product surfaces.
- Lead product management for SCIM 2.0 support, enabling automated user provisioning and deprovisioning from customer identity providers.
- Define data models and API contracts for SCIM endpoints, including Users, Groups, and custom schemas.
- Partner with engineering on sync reliability, conflict resolution, and real-time de-provisioning.
- Create SCIM documentation, guides, and onboarding flows for IT administrators.
- Drive requirements for integrations with directories including on-premises Active Directory, Entra ID, Okta, and Auth0.
- Support customer environments using both on-premises and cloud-based directories, and define how directory attributes map to roles, permissions, and organizational structures.
- Lead and contribute to identity federation strategy, including SAML 2.0 and OIDC/OAuth 2.0 SSO integrations with providers such as Microsoft Entra ID and Google Workspace.
- Help define SP-initiated and IdP-initiated login flows, Just-In-Time provisioning, and attribute-mapping configuration.
- Ensure federation supports enterprise requirements such as signed assertions, encrypted tokens, and custom claim mappings.
- Define and own the multi-year IAM roadmap, including authorization and provisioning.
- Develop a strategy for uniform access management that reduces fragmented authorization patterns and helps developers integrate workflows across products securely.
- Partner with enterprise sales and customer success to identify and prioritize IAM features that drive adoption and expansion.
- Balance strategic platform investments with near-term customer needs and communicate trade-offs to stakeholders.
- Write product requirements documents and user stories with clear engineering acceptance criteria.
- Collaborate with security, legal, and compliance teams to address SOC 2, ISO 27001, and applicable data residency requirements.
- Define and track IAM adoption, SSO coverage, SCIM sync reliability, and provisioning error-rate metrics.
Benefits
- Medical insurance
- Dental insurance
- Vision insurance
- Life insurance
- Disability benefits
- Time-off plans
- Retirement plans
- Tax savings plans for health, dependent care, and commuter expenses (offered by most businesses)
- Paid parental leave
- Employee Stock Purchase Plan
- Bonus eligibility
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
