IAM Product Owner
KeyBank · Brooklyn, OH · 1 wk ago
RemoteRemoteMarketing$96k–$181k/yrFull-time
Key Responsibilities
- Define and maintain the product roadmap for SSO and MFA capabilities (e.g., federation, conditional access, password less, adaptive authentication).
- Align roadmap to enterprise IAM strategy and Zero Trust architecture.
- Incorporate regulatory requirements (SOX, PCI, FFIEC) into product direction.
- Own and prioritize the product backlog for SSO/MFA platforms.
- Translate business, risk, and compliance needs into actionable user stories.
- Partner with engineering teams using Agile methodologies.
- Ensure features meet auditability and traceability requirements.
- Drive design and implementation of SSO (SAML, OIDC, OAuth), MFA (push, SMS, hardware tokens, FIDO2), adaptive authentication, and conditional access policies.
- Ensure integration with identity lifecycle and directory services.
- Risk, Compliance & Audit Alignment
- Ensure authentication controls meet internal security standards and regulatory expectations.
- Partner with risk, audit, and cybersecurity teams.
- Maintain evidence for MFA enforcement, SSO policies, and access controls.
- Stakeholder Management
- Act as the bridge between business units, IAM engineering, security architecture, and risk teams.
- Drive alignment on authentication standards and onboarding priorities.
- Platform Adoption & Integration
- Lead onboarding of applications to SSO and MFA platforms.
- Define integration patterns and prioritize high-risk applications.
- Metrics & Continuous Improvement
- Track KPIs such as MFA coverage, SSO adoption, and authentication success rates.
- Drive continuous improvement in security posture and user experience.
Required Qualifications
- 5+ years in Product Owner, Product Manager, or IAM roles.
- Strong expertise in SSO and MFA technologies.
- Experience in Agile environments.
- Understanding of IAM ecosystems.
Preferred Qualifications
- Experience in regulated industries.
- Knowledge of SOX and PCI.
- Experience with platforms such as Okta, Entra ID, Ping, or SailPoint.