Principal Product Manager, Security and Identity Platform

AlphaSense delivers AI-powered market intelligence and search to help sophisticated companies make informed decisions. The Principal Product Manager will lead the strategy and delivery of security and identity offerings, owning authentication, authorization, provisioning, auditability, data isolation, and secure deployment for demanding enterprise customers.

Responsibilities:

• Own authorization, authentication, and entitlement:In partnership with engineering and product security, define and execute a roadmap of improvements to our underlying identity and access platform
• Automate enterprise user provisioning: Build the platform and user experience for how customers onboard and manage their users through SCIM and directory integration, enabling efficient provisioning at large scale
• Make access auditable and least-privilege by default: Drive centralized audit logging, least-privilege access, and organization-isolation guarantees that stand up to the scrutiny of the most security-conscious enterprises
• Secure customer content. Own the product direction for secure deployment, ensuring we meet customer needs around data isolation, AI processing, regional hosting, and encryption. Serve as a trusted resource for customers running on private or customer-deployed infrastructure

Requirements:

• You've delivered identity, access, authentication, or comparable platform capabilities at enterprise scale, but you built them from the early stages, rather than following a mature playbook
• You have the executive presence to align a room of senior stakeholders, the maturity to handle difficult conversations with demanding customers, and the hands-on builder mentality to drive complex projects forward
• You're fluent in the identity and access domain – OAuth 2.0, OIDC, SAML, SCIM, JWT, RBAC/ABAC, MFA – and are comfortable around enterprise identity platforms like Auth0 and Okta
• You deeply understand federated identity models and have built platforms where customers define user identity
• You stay close to what regulated enterprise customers actually need, and their security leaders trust your expertise
• You can judge what level of security a situation actually calls for, pushing back on requirements that aren't needed and holding the line on the ones that are with a well-reasoned approach to trade-offs
• You've operated in regulated industries where meeting a real compliance bar and keeping the platform usable are both non-negotiable
• You see secure infrastructure as something that delivers value to enterprise customers and can effectively position it as such
• You can influence cross-functional partners to view security investments as revenue-generators rather than costs