SlipstreamJobsFresh Startup & VC-Backed Jobs

Information Security Manager - Identity and Access Management (IAM)

Zoox - Foster City, CA, United States - In-office - posted 2026-10-08

Apply on the company site

SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.

Zoox is seeking an Information Security Manager to lead the Identity and Access Management (IAM) function across the organization. This is a hands-on leadership role responsible for defining and executing the enterprise IAM strategy, building and mentoring a high-performing team, and ensuring robust identity governance aligned with Zero Trust principles. Key Responsibilities: Strategic Leadership & Governance: Lead the definition and rollout of the enterprise IAM roadmap, aligning identity practices with Zero Trust principles and corporate security standards. Develop, maintain, and enforce comprehensive identity policies including Role-Based Access Control (RBAC), Attribute-Based Access Control (ABAC), Least Privilege, and Separation of Duties (SoD). Lead, mentor, and build a high-performing team of IAM engineers, system integrators, and security analysts. Operational Excellence & Technical Oversight: Oversee Joiner, Mover, and Leaver (JML) processes to automate provisioning and de-provisioning workflows across on-premises and cloud platforms. Architect and oversee modern authentication standards including Single Sign-On (SSO), Multi-Factor Authentication (MFA), SAML 2.0, OpenID Connect (OIDC), and passwordless technology. Manage enterprise Privileged Access Management (PAM) solution implementation, securing administrative credentials, session monitoring, and just-in-time access controls. Direct Identity Governance & Administration (IGA) initiatives including user access reviews, entitlement certification campaigns, and automated access request/approval workflows. Risk Management, Compliance & Support: Function as the primary IAM lead for internal and external audits, ensuring timely remediation of access-related findings. Act as an escalation point for identity-focused security incidents, credential compromise investigations, and unauthorized access cases. Evaluate, select, and manage third-party IAM software vendors, tools, and professional services partners. About Zoox: Zoox is developing the first ground-up, fully autonomous vehicle fleet and supporting ecosystem. The company sits at the intersection of robotics, machine learning, and design, aiming to provide next-generation mobility-as-a-service in urban environments. Requirements: - 8+ years of total experience in IT and Cybersecurity, with at least 3+ years in a leadership/management capacity focused specifically on Identity & Access Management - Hands-on experience with industry-standard IAM tools: Microsoft Entra ID (Azure AD), Okta, Ping Identity, Active Directory; IGA platforms such as SailPoint, Saviynt, or Microsoft Entra ID Governance; PAM solutions including CyberArk, BeyondTrust, Delinea, or HashiCorp Vault - Deep understanding of OAuth 2.0, SAML, OIDC, SCIM, Kerberos, and LDAP protocols - Strong familiarity with regulatory compliance frameworks - Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or equivalent practical experience Bonus Qualifications: - CISSP, CISM, CISA, or vendor-specific certifications (Okta Certified Professional, Microsoft Certified: Identity and Access Administrator Associate, SailPoint Certified) - Hands-on experience managing identity across AWS, Azure, or GCP cloud environments - Proficiency in scripting/automation (PowerShell, Python, REST APIs) for workflow optimization

Similar roles