Senior Technical Product Manager – Identity & Access Management

About the role

As the Senior Product Manager for Customer Identity & Access Management (CIAM) at Zinnia, you will define and execute the product roadmap that secures how carriers, distributors, partners, and policyholders interact with the platform. You will lead the end‑to‑end identity experience—from authentication and authorization to the full user lifecycle—while balancing security, compliance, and usability.

Key responsibilities

• Own the CIAM product strategy and roadmap across consumer, partner, and workforce identities.
• Define and prioritize core identity capabilities such as SSO, MFA, passwordless, adaptive risk‑based authentication, RBAC/ABAC, and SCIM‑based provisioning.
• Set technical standards for modern identity protocols (OAuth 2.0, OpenID Connect, SAML, SCIM) in collaboration with engineering and architecture teams.
• Evaluate build‑vs‑buy decisions for identity providers and drive integration across Zinnia’s product suite.
• Partner with Security, Risk, and Compliance to ensure regulatory and industry requirements are met.
• Establish and monitor success metrics including authentication success rates, MFA adoption, account‑takeover reduction, and time‑to‑provision.
• Act as a technical advisor to product teams and mentor a lean group of product managers.
• Engage with carriers and distributors to address identity‑related integration and custom development needs.

Required profile

• 9+ years of techno‑functional product management experience, preferably in identity or security domains.
• Bachelor’s or Master’s degree in a technology‑related field or equivalent experience.
• Proven track record of delivering identity solutions that meet security, privacy, and regulatory standards.
• Strong collaboration skills with engineering, security, and compliance stakeholders.

Required skills

• OAuth 2.0
• OpenID Connect
• SAML
• SCIM
• Single Sign‑On (SSO)
• Multi‑Factor Authentication (MFA)
• Passwordless and adaptive risk‑based authentication
• Role‑Based Access Control (RBAC)
• Attribute‑Based Access Control (ABAC)