Head of Identity and Access Management (AI)

TL;DR

Head of Identity and Access Management (AI): Architecting and operating a zero-trust identity infrastructure for an AI research lab with an accent on phishing-resistant authentication and secure GPU cluster access. Focus on eliminating static credentials, building JIT credentialing systems, and implementing policy-as-code to protect high-value AI intellectual property.

Location: Must be based in NYC or San Francisco

Company

Research lab dedicated to making intelligence open and accessible by building open foundational AI models.

What you will do

• Design and implement a cloud-native zero-trust identity architecture leveraging modern IdPs and edge-enforced access networks.
• Mandate and enforce hardware-backed authentication (YubiKeys/WebAuthn) globally to eliminate legacy MFA bypass vectors.
• Build just-in-time (JIT) credentialing systems for research access to massive GPU clusters across AWS, GCP, and OCI.
• Architect SPIFFE/SPIRE or cloud-native cryptographic identity frameworks for secure service-to-service communication.
• Implement authorization policies as code using Open Policy Agent (OPA), Rego, or Cedar.
• Automate identity lifecycle management via SCIM and API-first tooling to ensure auditability and speed.

Requirements

• 15+ years of experience in identity security, security architecture, or infrastructure engineering.
• Proven track record of operating zero-trust identity infrastructure at scale, including JIT credentialing and workload identity.
• Hands-on experience securing IAM boundaries across AWS, GCP, and Kubernetes.
• Strong software engineering capabilities in Go, Python, or Rust for building custom tooling.
• Proficiency in Infrastructure as Code using Terraform or Pulumi.
• Deep first-principles understanding of OAuth 2.0, OIDC, SAML, WebAuthn, and PKI.

Culture & Benefits

• Top-tier compensation package including stock options for all employees.
• Comprehensive medical, dental, vision, and life insurance with an annual wellness allowance.
• Daily lunch and dinner provided in the office.
• Generous family support with 22 weeks of paid parental leave.
• Unlimited paid time off in the U.S.
• Visa sponsorship support for exceptional global talent.