Information Security Manager - Identity and Access Management (IAM)

Leads identity and access management for Zoox's enterprise IT environment, managing a mixed team of identity engineers, integrators and analysts and owning the IAM roadmap. The strategy is built around Zero Trust and the company's security standards.

The manager sets and enforces identity policy, including role- and attribute-based access, least privilege and separation of duties, and oversees automated joiner, mover and leaver provisioning across on-premises and cloud systems. Authentication architecture sits here too: single sign-on, MFA, SAML, OIDC and passwordless approaches. The role runs the privileged access management platform, which protects admin credentials, records sessions and grants elevated rights only when needed, directs identity governance work such as access reviews, entitlement certifications and request workflows, serves as the main IAM contact for internal and external audits, handles escalations for identity-related incidents such as compromised credentials, and selects and manages IAM vendors and service partners.

Zoox wants eight or more years in IT and cybersecurity, three or more of them leading IAM teams, hands-on experience with tools such as Entra ID, Okta, Ping or Active Directory, SailPoint or Saviynt, and CyberArk, BeyondTrust, Delinea or Vault, deep protocol knowledge from OAuth 2.0 and SCIM to Kerberos and LDAP, and familiarity with compliance frameworks. CISSP, CISM, CISA or vendor certifications, cloud identity experience and scripting are pluses. The role is hybrid in Foster City.