Define the engineering strategy, architecture, and roadmap for Autodesk's IAM platforms across workforce, non-human, and agentic identity
Lead engineering teams responsible for IAM platforms, APIs, automation services, and identity integrations
Oversee engineering for SailPoint, Microsoft Entra, Okta, SSO, MFA, app onboarding, directory services, identity verification, and privileged access integrations
Build secure, scalable, and reusable identity paved roads for internal teams
Own engineering patterns for non-human identities including service accounts, workload identities, API identities, automation accounts, and federated machine identities
Define secure patterns for agentic and on behalf of identity , including OBO flows , delegated access, scoped tokens, constrained execution, and least privilege controls
Drive adoption of short lived credentials, federation, secret reduction, lifecycle controls, and stronger ownership for non-human and agentic identities
Ensure engineering designs align to least privilege, privileged access, separation of duties, logging, and traceability requirements
Partner with IAM Security and Trust on RBAC, ABAC, PIM, PAM integrations, auditability, and identity risk reduction
Lead and grow a high performing IAM Engineering organization with strong technical ownership, delivery standards, and production readiness
Encourage effective and secure use of AI assisted engineering tools to improve delivery, documentation, and operational efficiency
Requirements
10+ years of experience in IAM, security engineering, platform engineering, or related enterprise identity domains
5+ years leading engineering teams responsible for IAM platforms, identity services, or security infrastructure at enterprise scale
Strong experience with SailPoint, Microsoft Entra, and Okta
Deep knowledge of OAuth2, OIDC, SAML, JWT, token exchange, OBO flows, federation, and modern workload identity patterns
Experience designing identity architectures across SSO, MFA, provisioning, lifecycle automation, directory services, access governance, and app onboarding
Experience securing and engineering for non-human identities across cloud, CI CD, platform, and runtime environments
Experience defining secure patterns for agentic identity and software acting on behalf of users or services
Strong engineering fundamentals across APIs, automation, distributed systems, CI CD, observability, and secure platform delivery
Experience with privileged access, admin tiering, just in time access, and strong production control boundaries
Experience working in regulated environments, including FedRAMP, public sector, or similarly controlled environments
Experience using AI tools to improve engineering productivity, design quality, analysis, or automation with sound security judgment
Strong cross functional leadership skills and the ability to influence operations, security, compliance, and engineering stakeholders
Experience with Active Directory modernization, hybrid identit
Benefits
Vision insuranceRemote work options
Additional Information
Job Requisition ID #
26WD97993
Position Overview
Autodesk's Enterprise Identity Services team is looking for a Director, IAM Engineering to lead the strategy and execution for modern Identity and Access Management engineering across workforce identity, non-human identity , directory and identity infrastructure, authentication, federation, access governance integrations, identity platform modernization, and emerging AI and agentic identity patterns.
Reporting to the Senior Director, Information Security Engineering , this leader will own the IAM Engineering pillar and build a scalable engineering organization that delivers secure, resilient, and developer friendly identity platforms across Autodesk. The role will partner closely with the Director of IAM Operations and the Senior Manager of IAM Security and Trust to ensure strong separation of duties, secure by default engineering, and operational excellence.
This role requires both strong engineering depth and strong security judgment, with leadership across platforms and services such as SailPoint, Microsoft Entra, Okta, SSO, MFA, federation, directory services, identity lifecycle automation, privileged access integrations, custom identity applications, non-human identity security, and AI or agent enabled access patterns . This leader should also bring experience operating in regulated environments, including FedRAMP and public sector security requirements .
This role is remote-friendly within North America. For those who prefer in-office or hybrid work, the role can be based in San Francisco, CA; Portland, OR; Boston, MA; or Denver, CO.
Travel requirements are approximately 20%.
In accordance with U.S. government contracting and FedRAMP compliance obligations, this role requires U.S. citizenship or U.S. lawful permanent residency. Employment is contingent upon meeting all applicable government security and eligibility requirements.
Autodesk · San Francisco, CA