Senior Product Manager, Identity & Authentication Platform BU

Here's a summary of the role: Identity infrastructure is not glamourware . It doesn't get standing ovations at company all-hands. But it is the thing every product in the portfolio depends on, and when it breaks, everyone knows.

If you're the kind of PM who finds that genuinely interesting, read on. This role is for someone who has lived inside SAML flows, argued over PKCE token lifetimes, and knows exactly why SSO bypass lists are a necessary compromise. You'll own the authentication platform that thousands of enterprise customers trust, and you'll shape it alongside engineers who go deep.

No surface-level roadmap ownership here.

What You'Ll Do (Not All Of It, Just The Important Stuff)

0 with PKCE, MFA enforcement, token lifecycle management, and multi-IdP federation. Make product decisions that sit at the intersection of system design, security architecture, and developer experience, working directly with senior engineers on protocol choices and infrastructure trade-offs. Drive adoption of platform identity capabilities across internal engineering teams through influence, moving products toward modern API patterns and away from legacy integration surfaces.

Use AI coding tools (Claude Code, Cursor, or similar) to prototype ideas and validate concepts before you pitch them; this is expected, not optional. Track the IAM standards landscape, including passkeys, FIDO2, SCIM, zero-trust, and verifiable credentials, and use that knowledge to sharpen product direction. Translate complex authentication concepts (JWT structures, SAML assertions, PKCE handshakes) into clear specs, user stories, and prioritized backlogs for audiences from engineers to executives.

0, PKCE, JWT, MFA/TOTP, and SSO federation; you've made production decisions with these, not just read about them. Experience owning IAM products, developer-facing identity platforms, or authentication infrastructure in a SaaS environment. 3 - 7 years of product management experience on technically complex platform or infrastructure products.

Comfort with access control concepts: RBAC, ABAC, scopes, entitlements, and user provisioning and deprovisioning flows. Experience in a platform or shared services context where your customers are internal engineering teams. Familiarity with enterprise IdP ecosystems such as Okta, Azure AD, Ping Identity, or Google Workspace.

An active AI-native work style; you already use AI tools to investigate systems, prototype integrations, and close the feedback loop with engineering faster. It would be great if you had these too, but we'll support you if you don't Exposure to GovCloud or regulated multi-region authentication environments. Experience conducting technical teardowns of identity platforms (Auth0, Azure Entra ID, Ping Identity) to inform product strategy.

Familiarity with verifiable credentials, FIDO2/passkeys, or emerging zero-trust IAM patterns. Pay Range $131,000 — $164,000 CAD About Us Diligent is the AI leader in governance, risk and compliance (GRC) SaaS solutions, helping more than 1 million users and 700,000 board members to clarify risk and elevate governance. The Diligent One Platform gives practitioners, the C-Suite and the board a consolidated view of their entire GRC practice so they can more effectively manage risk, build greater resilience and make better decisions, faster.

At Diligent, we're building the future with people who think boldly and move fast. Whether you're designing systems that leverage large language models or part of a team reimaging workflows with AI, you'll help us unlock entirely new ways of working and thinking. Curiosity is in our DNA, we look for individuals willing to ask the big questions and experiment fearlessly - those who embrace change not as a challenge, but as an opportunity.