Senior Product Manager, Identity & Access Management (10390)

Position type: Full time

Location: San Jose, CA | Salem, NH | Raleigh, NC

Position reports to: VP of Product Management

Application deadline: Applications are being accepted on a rolling basis and this posting will remain open until filled.

Work authorization: Applicants must have legal authorization to work in the country where the role will be performed.

Enterprise networks are moving from fully manual operations toward a hybrid model in which teams continue to operate the network while autonomous agents handle specific, scoped tasks.

• Human identity supports sessions, interactive workflows, and judgment-driven decisions such as policy changes, architecture updates, and incident response.
• Agent identity enables 24/7 autonomous execution for routine, well-defined work—but only within explicit boundaries. Agents can operate independently when the task is in scope, and must escalate exceptions, anomalies, or boundary violations to humans.

We are seeking a Senior Product Manager to own Identity & Access Management (IAM) as a platform service—not simply as a feature backlog. In this role, you will define the architecture, governance model, and roadmap for identity across Extreme Platform ONE as enterprise customers expand their networks to support autonomous agents.The operating model is intentionally built for both human operators and autonomous agents. Humans remain in control of judgment-driven work, governance, and exception handling, while agents take on well-defined, repetitive tasks such as health monitoring, standard deployments, and routine optimizations.

This is a highly cross-functional, high-visibility role at the intersection of platform strategy, customer success, AI innovation, and service ownership across networking and security. You will partner closely with platform service owners, engineering leaders, and executive stakeholders to support a broad set of enterprise use cases.

• Own the enterprise identity strategy for Extreme Platform ONE, serving human operators AND autonomous agents in a hybrid operational model

• Define architectural standards, governance rules, and cross-team enforcement mechanisms for all identity-impacting changes

• Create and maintain the Identity & Access governance framework (rule engine, Quality review, SLA enforcement, Compliance),

• Ensure zero unplanned cross-product identity regressions; own PSIRT escalation response and remediation roadmaps

• Design and evolve the identity model that enables agents to work autonomously on specific tasks while enforcing strict boundaries: capability binding, intent constraints, token lifecycle, graduated trust, and escalation thresholds

• Define which tasks agents can execute fully autonomously (e.g., health monitoring, standard deployments, routine optimizations) vs. which require human approval/oversight vs. which remain human-only (policy, architecture, incident response)

• Design escalation mechanisms: agents execute within scope but immediately escalate anomalies, exceptions, and anything outside their decision boundaries to humans

• Partner with AI platform leadership to ensure agents can operate autonomously safely, and humans retain full visibility and control

• Own the product roadmap for identity capabilities: provisioning, token lifecycle, audit trails, API scoping, multi-tenant isolation, autonomous agent execution audit (what did agents do, why, did they stay in bounds, what escalated to humans)

• Define service-level agreements (SLAs) for identity: availability, performance, consistency, observability, and other factors, such as human escalation response times

• Translate customer requirements, competitive intelligence, and platform constraints into clear, prioritized capabilities

• Communicate roadmap clearly to customers, sales, engineering, and leadership

• Write clear product requirements and user stories for identity capabilities that serve humans and enable agents to work within scoped autonomy

• Collaborate with engineering and design solutions that require deep architectural understanding of human-agent boundaries

• Partner on phased rollout and adoption strategies (beta programs, feature flags, rollback readiness, escalation testing)

• Own product lifecycle: from validation → design → execution → adoption → measurement

• Be the voice of the customer on all things identity & access control. Conduct discovery with large enterprises across different verticals to understand which operational tasks they trust agents with today, which they plan to delegate, and which will always require human judgment

• Build trust through radical transparency and human control: customers must understand exactly what agents can do, what stays human-only, where boundaries are, and how to override/escalate

• Own the competitive battlecard: how Extreme's human-controlled, agent-expanded approach differs from competitors who oversell full automation

• Coordinate identity roadmap dependencies across platform, infrastructure, security, and AI/agent teams

• Ensure identity governance is the control mechanism that enforces which tasks agents can execute autonomously and which require human approval

• 7+ years Product Management experience in enterprise SaaS, networking, security, or platform infrastructure roles

• Deep IAM/Identity expertise: OAuth 2.0, SAML, OIDC, token lifecycle, RBAC, ABAC, multi-tenant boundary enforcement, audit trails

• Platform product management: You've shipped products where cross-team governance mattered and architectural decisions had wide impact

• Architectural thinking: You can read technical specs, understand distributed system tradeoffs, and translate between engineering and business language

Agentic systems knowledge: Understanding of how autonomous agents operate within task-scoped boundaries. Familiar with concepts like capability binding, intent constraints, graduated trust, behavior drift detection, human escalation

• Enterprise customer fluency: You understand large-organization compliance needs, audit requirements, and how enterprises operate networks

• Security/compliance: Experience with IAM platforms (Okta, CyberArk, Microsoft Entra); familiar with compliance frameworks (SOC 2, GDPR, HIPAA, FedRAMP)

• SaaS scale: Experience with building products that scale to millions of users/devices and thousands of enterprise tenants