Security Product Engineering Manager

Role overview

Join ActiveCampaign as a Security Product Engineering Manager. You’ll lead a small team of experienced engineers to consolidate identity services onto a centralized platform, translate security requirements into seamless identity capabilities, and help shape the organization’s security culture.

Responsibilities

• Lead and develop a team of senior/staff engineers with hands-on technical mentorship, career development, and effective people management.
• Migrate and standardize identity services onto a centralized platform, partnering with Platform Engineering on long-term architecture.
• Drive operational excellence by hardening the existing identity stack, reducing incident frequency, and improving observability and operational rigor to support mission-critical infrastructure.
• Apply security and engineering best practices across identity and authentication/authorization systems.

Requirements

• Proven experience in system consolidation, ideally migrating from legacy/bespoke authentication to standardized centralized platforms.
• Strong understanding of modern identity protocols and standards, including:
  • authentication, authorization
  • federation
  • token-based architectures
• 3+ years of engineering management experience leading engineers (not only project tech leadership), including running effective 1:1s and providing hard feedback.
• 5+ years hands-on engineering experience building and operating identity/auth/authorization systems at scale.
• Ability to read/review code, evaluate architecture decisions, and credibly challenge technical direction.
• Strong communication skills to translate identity/security concepts for product managers, platform engineers, and executives.

Nice-to-haves

• Experience with fraud-adjacent identity concerns (e.g., account takeover prevention, credential stuffing mitigation, adaptive authentication).
• SaaS multi-tenant identity experience and its security implications.
• Background in platform/application security beyond identity (secure SDLC, infrastructure hardening).
• Experience creating developer-facing documentation, SDKs, or integration guides for identity services.
• Experience working where security functions as an engineering team, not only compliance.