Senior Product Manager (Technical) – Identity & Access Management

About the role

As a Senior Product Manager (Technical) for Customer Identity & Access Management (CIAM) at Zinnia, you will own the product roadmap that enables carriers, distributors, partners and policyholders to securely access the platform. You will drive the end‑to‑end identity experience, balancing strong security, regulatory compliance and a frictionless user journey.

Key responsibilities

• Define and execute the CIAM product roadmap covering consumer, partner and workforce identity.
• Lead development of core identity capabilities such as SSO, MFA, passwordless, adaptive authentication, RBAC/ABAC, and the full user lifecycle (registration, provisioning/SCIM, recovery, deprovisioning).
• Set technical standards for modern identity protocols (OAuth 2.0, OpenID Connect, SAML, SCIM) in collaboration with engineering and architecture teams.
• Make build‑vs‑buy decisions, select identity providers and define integration strategies across Zinnia products.
• Ensure security, privacy and usability while mitigating threats like account takeover and credential stuffing.
• Partner with Security, Risk and Compliance to meet insurance‑industry regulatory requirements.
• Define success metrics (authentication success, MFA adoption, account‑takeover reduction, time‑to‑provision, partner onboarding) and track performance.
• Act as a technical consultant and mentor for product managers, and serve as a liaison for carrier and distributor integration needs.

Required profile

• 9+ years of techno‑functional product management experience.
• Bachelor’s or Master’s degree in technology or a related field.
• Deep, hands‑on knowledge of modern identity standards and protocols.
• Proven ability to balance security, compliance and user experience in complex B2B/B2C environments.

Required skills

• OAuth 2.0
• OpenID Connect
• SAML
• SCIM
• Single Sign‑On (SSO)
• Multi‑Factor Authentication (MFA)
• Passwordless and adaptive/risk‑based authentication
• Role‑Based Access Control (RBAC) and Attribute‑Based Access Control (ABAC)