Director, IAM Engineering

Job Requisition ID #

26WD97993

Position Overview

Autodesk's Enterprise Identity Services team is looking for a Director, IAM Engineering to lead the strategy and execution for modern Identity and Access Management engineering across workforce identity, non-human identity, directory and identity infrastructure, authentication, federation, access governance integrations, identity platform modernization, and emerging AI and agentic identity patterns.

Reporting to the Senior Director, Information Security Engineering, this leader will own the IAM Engineering pillar and build a scalable engineering organization that delivers secure, resilient, and developer friendly identity platforms across Autodesk. The role will partner closely with the Director of IAM Operations and the Senior Manager of IAM Security and Trust to ensure strong separation of duties, secure by default engineering, and operational excellence.

This role requires both strong engineering depth and strong security judgment, with leadership across platforms and services such as SailPoint, Microsoft Entra, Okta, SSO, MFA, federation, directory services, identity lifecycle automation, privileged access integrations, custom identity applications, non-human identity security, and AI or agent enabled access patterns. This leader should also bring experience operating in regulated environments, including FedRAMP and public sector security requirements.

This role is remote-friendly within North America. For those who prefer in-office or hybrid work, the role can be based in San Francisco, CA; Portland, OR; Boston, MA; Denver, CO; or Toronto, ON.

Travel requirements are approximately 20%

Responsibilities

• Define the engineering strategy, architecture, and roadmap for Autodesk's IAM platforms across workforce, non-human, and agentic identity
• Lead engineering teams responsible for IAM platforms, APIs, automation services, and identity integrations
• Oversee engineering for SailPoint, Microsoft Entra, Okta, SSO, MFA, app onboarding, directory services, identity verification, and privileged access integrations
• Build secure, scalable, and reusable identity paved roads for internal teams
• Own engineering patterns for non-human identities including service accounts, workload identities, API identities, automation accounts, and federated machine identities
• Define secure patterns for agentic and on behalf of identity, including OBO flows, delegated access, scoped tokens, constrained execution, and least privilege controls
• Drive adoption of short lived credentials, federation, secret reduction, lifecycle controls, and stronger ownership for non-human and agentic identities
• Ensure engineering designs align to least privilege, privileged access, separation of duties, logging, and traceability requirements
• Partner with IAM Security and Trust on RBAC, ABAC, PIM, PAM integrations, auditability, and identity risk reduction
• Lead and grow a high performing IAM Engineering organization with strong technical ownership, delivery standards, and production readiness
• Encourage effective and secure use of AI assisted engineering tools to improve delivery, documentation, and operational efficiency

• 10+ years of experience in IAM, security engineering, platform engineering, or related enterprise identity domains
• 5+ years leading engineering teams responsible for IAM platforms, identity services, or security infrastructure at enterprise scale
• Strong experience with SailPoint, Microsoft Entra, and Okta
• Deep knowledge of OAuth2, OIDC, SAML, JWT, token exchange, OBO flows, federation, and modern workload identity patterns
• Experience designing identity architectures across SSO, MFA, provisioning, lifecycle automation, directory services, access governance, and app onboarding
• Experience securing and engineering for non-human identities across cloud, CI CD, platform, and runtime environments
• Experience defining secure patterns for agentic identity and software acting on behalf of users or services
• Strong engineering fundamentals across APIs, automation, distributed systems, CI CD, observability, and secure platform delivery
• Experience with privileged access, admin tiering, just in time access, and strong production control boundaries
• Experience working in regulated environments, including FedRAMP, public sector, or similarly controlled environments
• Experience using AI tools to improve engineering productivity, design quality, analysis, or automation with sound security judgment
• Strong cross functional leadership skills and the ability to influence operations, security, compliance, and engineering stakeholders

• Experience with Active Directory modernization, hybrid identity, and directory sync architecture
• Experience building identity paved roads and reusable engineering patterns
• Experience supporting public sector identity requirements and stronger compliance evidence models
• Experience with custom identity services, identity APIs, AI enabled platforms, and platform modernization programs