Senior Product Manager, Identity and Access Management (Strata Cloud Manager)

Palo Alto Networks • Office - USA - CA - Headquarters, CA

5d • Onsite

About The Position

The Senior Product Manager will define and drive the identity and access management (IAM) vision, strategy, and multi-quarter roadmap for Strata Cloud Manager (SCM). The role covers capabilities including role-based access control (RBAC), fine-grained authorization, identity federation (SAML/OIDC/SCIM), and multifactor authentication and single sign-on (MFA/SSO). It owns the cross-platform access control model across SCM to ensure consistent policy enforcement for operators, customers, and service-to-service interactions in a multi-tenant environment.

The product manager will partner with downstream product teams, including NGFW, Prisma, and Cortex, to define IAM integration requirements and ensure platform capabilities support go-to-market needs. The role engages enterprise customers, field teams, and security architects to validate requirements and turn feedback into prioritized product decisions. It also drives alignment with applicable compliance and regulatory requirements, collaborates with Product Marketing on messaging and technical documentation, defines and tracks success metrics, and contributes to platform decisions concerning API security, service authorization, and developer-facing identity primitives.

Requirements

• Bachelor’s or master’s degree in Computer Science, Information Security, or a related technical field, or equivalent practical experience.
• At least 5 years of product management experience, with a demonstrated history of shipping enterprise SaaS or cloud platform products.
• Deep understanding of IAM concepts and protocols, including RBAC, ABAC, SAML 2.0, OIDC/OAuth 2.0, SCIM, MFA, SSO, and directory services.
• Experience building shared platform capabilities consumed by multiple products or teams, and ability to balance diverse stakeholder needs with a cohesive platform architecture.
• Familiarity with zero trust security architecture principles, enterprise compliance requirements (FedRAMP, SOC 2, ISO 27001), and the relationship between IAM, audit, governance, and risk.

Nice To Haves

• Hands-on experience defining access control models for multi-tenant SaaS platforms, including operator/reseller/customer hierarchy patterns.
• Experience defining IAM capabilities for developer-facing APIs, scopes, service accounts, API key management, and machine-to-machine authentication.
• Proven ability to align engineering, security architecture, legal, and go-to-market teams around a shared identity strategy without direct authority.
• Strong written and verbal communication skills, including experience presenting technical identity tradeoffs to platform architects and leadership.
• Track record of defining success metrics for platform capabilities and using data to drive roadmap decisions and stakeholder confidence.

Responsibilities

• Define and drive the IAM product vision, strategy, and multi-quarter roadmap, including RBAC, fine-grained authorization, identity federation (SAML/OIDC/SCIM), and MFA/SSO.
• Own SCM’s cross-platform access control model and ensure consistent policy enforcement for operators, customers, and service-to-service interactions in a multi-tenant environment.
• Partner with downstream product teams, including NGFW, Prisma, and Cortex, to define IAM integration requirements and ensure platform capabilities meet go-to-market needs.
• Engage enterprise customers, field teams, and security architects to validate requirements and translate feedback into prioritized product decisions.
• Drive alignment with compliance and regulatory requirements, including SOC 2, FedRAMP, and GDPR, as they relate to identity, access control, and audit logging.
• Collaborate with Product Marketing on messaging, technical documentation, and competitive positioning for IAM capabilities.
• Define and track success metrics, including adoption, time-to-provision, and MTTR for access incidents, and use data to drive continuous improvement.
• Contribute to platform-level decisions on API security, service authorization, and developer-facing identity primitives such as tokens, scopes, and API keys.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior