SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 189,990 - 256,500 / annual
Blackhawk Network (BHN) is seeking a Principal Product Security Engineer to serve as the technical strategist and architect driving security and identity strategy across the organization's entire technical ecosystem. This role focuses on identity and access management (IAM) while extending influence across corporate security domains including network, endpoint, Azure/AD infrastructure, data loss prevention, remote access, and secure enterprise browsing.
You will lead the overall strategy, direction, and technical vision of BHN's IAM program, establishing principles and best practices across identity lifecycle management, identity governance & administration (IGA), privileged access management (PAM), and access request/entitlement processes. Key responsibilities include:
• Designing and implementing comprehensive identity governance solutions to consolidate fragmented identity systems (multiple AD domains, Okta tenants) into a unified, compliant architecture
• Driving the organization's remote access strategy, architecting secure connectivity solutions (Prisma Access / SASE) including SSL/TLS decryption for traffic inspection and threat prevention
• Establishing and managing data loss prevention (DLP) strategy and controls to protect sensitive data across the enterprise
• Leading adoption and integration of secure enterprise browser technology (Prisma Browser) to protect access to corporate applications and data
• Providing technical vision in the deployment of authentication, authorization, provisioning, network security, and endpoint security technologies across heterogeneous environments
• Partnering with Compliance, Security, and IT Operations teams to ensure solutions meet regulatory requirements (PCI DSS, SOC2, NYDFS, SOX)
• Evaluating emerging security and IAM technologies (zero trust, passwordless authentication, identity threat detection, SASE) to keep the organization at the forefront of access and data security
• Mentoring and upskilling engineering teams across disciplines, building organizational competency in security and identity best practices
BHN is a global platform enabling businesses to tap into the world's largest network of branded payment solutions, including gift cards, egifts, corporate payouts, and rewards. The company spans the globe with more than 400,000 consumer touchpoints.
Workplace: Hybrid with focused remote work plus in-person collaboration on Tuesdays and Wednesdays at the Pleasanton headquarters.
REQUIREMENTS:
• BA degree + 12+ years of experience in information security, identity and access management, or equivalent relevant experience
• Technical mastery in IAM principles and methodologies including identity lifecycle management, RBAC, IGA, PAM, and access certification
• Expert-level understanding of identity protocols and standards: SAML, OAuth, OIDC, SCIM, LDAP, and Kerberos
• Strong experience across corporate security domains including DLP, secure remote access / SASE (Prisma Access or equivalent) with SSL/TLS decryption, and secure enterprise browser technologies (Prisma Browser or equivalent)
• Deep experience with enterprise directory services (Active Directory, Azure AD); Okta experience highly valued
• Solid understanding of network and endpoint security concepts and integration with zero trust security model
• Proven ability to architect and implement security and IAM solutions in complex, multi-domain environments with legacy system constraints
• Strong understanding of compliance frameworks (PCI DSS, SOC2, SOX, NYDFS) and how security and IAM controls support regulatory requirements
• Experience with ITSM platforms (ServiceNow) for access request and workflow automation
• Demonstrated ability to build security programs from foundational concepts through mature operational state
• AI fluency with demonstrated experience using AI tools effectively in the context of this role
• Excellent communication skills with ability to influence senior stakeholders and drive organizational change without direct authority
