> Markdown version of [/jobs/ext/3749984-product-manager-identity-and-access-management-strata-cloud-manager](https://www.wearedevelopers.com/jobs/ext/3749984-product-manager-identity-and-access-management-strata-cloud-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Product Manager, Identity and Access Management (Strata Cloud Manager - **Company:** Palo Alto Networks - **Location:** United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), ARM Architecture, Audit Trail, Software as a Service, Cyber Security, Identity and Access Management, Key Management, OAuth, OpenID, Role-Based Access Control, Zero Trust Network Access, Security Assertion Markup Language (SAML), Cloud Platform System, Software Security, Mttr, Data Analytics - **Published:** October 15, 2026 - **Apply:** https://startup.jobs/senior-product-manager-identity-and-access-management-strata-cloud-manager-paloaltonetworks-com-10460969 ## About the Role Education & Experience: BS/MS in Computer Science, Information Security, or a related technical field, or equivalent practical experience. - Product Management Track Record: 5+ years of product management experience, with a demonstrated history of shipping enterprise SaaS or cloud platform products. - Identity & Access Management Expertise: Deep understanding of IAM concepts and protocols, including RBAC, ABAC, SAML 2.0, OIDC/OAuth 2.0, SCIM, MFA, SSO, and directory services. - Platform Thinking: Experience building shared platform capabilities consumed by multiple products or teams, with the ability to balance diverse stakeholder needs against a cohesive platform architecture. - Enterprise Security Context: Familiarity with zero trust security architecture principles, enterprise compliance requirements (FedRAMP, SOC 2, ISO 27001), and how IAM intersects with audit, governance, and risk management. Preferred Qualifications - Multi-Tenancy Experience: Hands-on experience defining access control models for multi-tenant SaaS platforms, including operator/reseller/customer hierarchy patterns. - Developer Platform Exposure: Experience defining IAM capabilities for developer-facing APIs, scopes, service accounts, API key management, and machine-to-machine authentication. - Cross-Functional Leadership: Proven ability to align engineering, security architecture, legal, and GTM teams around a shared identity strategy without direct authority. - Executive Communication: Strong written and verbal communication skills, with experience presenting technical identity tradeoffs to platform architects, and leadership. - Data-Driven Ownership: Track record of defining success metrics for platform capabilities and using data to drive roadmap decisions and stakeholder confidence. ## Description Define and drive the IAM product vision, strategy, and multi-quarter roadmap, including RBAC, fine-grained authorization, identity federation (SAML/OIDC/SCIM), and MFA/SSO. - Own the cross-platform access control model across SCM, ensuring consistent policy enforcement for operators, customers, and service-to-service interactions in a multi-tenant environment. - Partner with downstream product teams (NGFW, Prisma, Cortex) to define IAM integration requirements and ensure platform capabilities meet their go-to-market needs. - Engage directly with enterprise customers, field teams, and security architects to validate requirements and translate feedback into prioritized product decisions. - Drive alignment with compliance and regulatory requirements (SOC 2, FedRAMP, GDPR) as they relate to identity, access control, and audit logging. - Collaborate with Product Marketing to build messaging, technical documentation, and competitive positioning for IAM capabilities. - Define and track success metrics: adoption, time-to-provision, MTTR for access incidents-and use data to drive continuous improvement. - Contribute to platform-level decisions on API security, service authorization, and developer-facing identity primitives (tokens, scopes, API keys).