Technical Product Manager – IAM/Access Management

We’re looking for a Technical Product Manager – IAM/Access Management to help us accomplish our mission to improve and extend lives by learning from the experience of every person with cancer. Are you ready to be the next changemaker in cancer care?

Flatiron Health is a healthtech company using data for good to power smarter care for every person with cancer, around the world. Flatiron partners with cancer centers in the US, Europe and Asia to transform patients’ real-life experiences into real-world evidence and create a more modern, connected oncology ecosystem. Our multidisciplinary teams include oncologists, data scientists, software engineers, epidemiologists, product experts and more. Flatiron Health is an independent affiliate of the Roche Group.

What You’ll Do:

Flatiron Health is seeking a Technical Product Manager to lead and evolve our employee lifecycle, access governance, and IAM (Identity and Access Management) strategy. Our goal is to ensure high-integrity, highly available identity data flows seamlessly through engineering and business systems, supported by strong and adaptive authentication/authorization patterns. IAM is the foundational layer that powers nearly every aspect of our business. This role will drive the vision, roadmap, and execution for secure, scalable, and efficient access management solutions that empower our global workforce while upholding the highest standards of security and compliance.

Product Vision & Roadmap:

• Define and communicate a clear vision for employee lifecycle management, access governance, and IAM initiatives. Develop and maintain a strategic roadmap that aligns with Flatiron’s business objectives and security requirements.
• Lifecycle Automation: Lead efforts to automate onboarding, offboarding, cross-boarding and other access provisioning/de-provisioning workflows for employees, contractors, and abstractors. Partner with IT, HR, and Security to ensure seamless integration across systems (e.g., Okta, Workday, Google Workspace)
• Access Governance: Implement and enhance access governance processes, including periodic access reviews, policy management, audit trails, and compliance tracking. Ensure only the right people have the right access at the right time.
• IAM Strategy & Execution: Drive the adoption of modern IAM models (RBAC/ABAC), federated identity solutions, and self-service capabilities. Oversee integration with cloud providers (AWS, GCP), CI/CD pipelines, secrets management tools, and other infrastructure components.
• Monitor emerging technologies and threats to ensure a strong, adaptive identity security posture.

Stakeholder Engagement + Operational Excellence:

• Serve as the primary liaison between engineering, security, IT, HR, and business stakeholders. Gather requirements, prioritize features, and ensure alignment on Flatiron priorities, strategies and execution dependencies.
• Adept at conducting user research and utilizing data insights to guide and influence product decisions. This involves integrating data analysis, user feedback, and the needs of stakeholders and the business to identify opportunities and prioritize roadmaps effectively.
• Define and track success metrics such as reduction in manual support requests, improved onboarding/offboarding cycle times, and increased automation coverage. Drive continuous improvement in operational processes
• Ensure robust documentation of processes, policies, and technical integrations. Support enablement programs to educate internal teams on best practices for access management

Who You Are:

You're a kind, passionate and collaborative problem-solver who values the opportunity to think beyond the way things are. In addition, you are able to:

• Shape clear strategies driven by data and aligned with business objectives
• Drive cross-functional initiatives
• Transform ambiguous challenges into structured solutions through intentional prioritization
• Translate complex technical concepts for diverse stakeholders
• Proactively engage with stakeholders and communicates risk effectively

Experience & Technical Skills:

• 4-7 years of product management experience in technical environments
• Proven experience with employee lifecycle management, access governance, privileged access management and IAM systems
• Deep understanding of IAM concepts, technologies, and best practices, authentication (LDAP, Kerberos, SSO, MFA) and authorizations protocols (RBAC, ABAC, etc.)
• Hands-on knowledge of Okta, Active Directory, Cloud Infrastructure (AWS/GCP/Azure), and automation tools (Terraform, CI/CD)
• Experience with compliance frameworks (SOC2, HIPAA, ISO27001, NIST, GDPR, MITRE ATT&CK), a plus

Who We Are

Our people are at the centre of everything we do. We strive to foster a culture where our teammates feel equipped and empowered to make meaningful contributions with confidence, compassion, and clarity.