Skip to content

Open nowPosted 4 days ago

Lead Product Manager – Identity & Access Management

trimble95 open roles

Where
US - CO, Westminster
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowLead Product Manager – Identity & Access Managementtrimble · US - CO, Westminster
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on trimble's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

8.4% of postings close within 7 days. Measured by our own scanner across the market. trimble postings stay open a median of 7 days.

Share of postings closed within
  1. 1.8%1 day
  2. 4.0%3 days
  3. 8.4%7 days
  4. 15.4%14 days
  5. 34.1%30 days
This job: posted 4 days ago

trimble median: 7 days open

The posting

Architect the Future of Enterprise Trust as our Product Manager, Identity & Access Management!

Ready to build the foundation of global enterprise security and seamless user access? Trimble is looking for a technically fluent visionary to lead our Identity and Access Management platform, owning the strategy and execution of how users and organizations manage access across our entire global ecosystem.

About Us

Trimble is a global technology company that connects the physical and digital worlds, transforming the ways work gets done. With relentless innovation in precise positioning, modeling and data analytics, Trimble enables essential industries including construction, geospatial and transportation. Whether it's helping customers build and maintain infrastructure, design and construct buildings, optimize global supply chains or map the world, Trimble is at the forefront, driving productivity and progress.

What Makes This Role Great:

In this role, you will be the primary architect of Trimble's identity ecosystem, owning the Organizations and multi-tenancy model that serves as the cornerstone for enterprise customer trust and cross-product integration.

Key Exciting Responsibilities

Organizations & Multi-Tenancy

  • Own the concept of 'Organizations' within our product — the logical grouping of users, teams, settings, and resources under a single enterprise tenant.
  • Contribute to the hierarchy model for organizations, including support for nested sub-organizations, delegated administration, and per-org policy overrides.
  • Manage the experience for org-level IAM configuration: domain verification and claiming, enforced SSO, member join flows, and seat management.
  • Ensure that organization-scoped roles and permissions are clearly modeled and consistently enforced across all product surfaces.

User Provisioning & SCIM

  • SCIM (System for Cross-domain Identity Management): lead product management for SCIM 2.0 support, enabling enterprise customers to automate user provisioning and deprovisioning from their identity providers (IdPs) directly into our platform.
  • Define the data model and API contracts for SCIM endpoints, including support for Users, Groups, and custom schemas.
  • Work with engineering to ensure robust sync reliability, conflict resolution, and real-time de-provisioning to uphold security standards.
  • Create documentation, guides, and onboarding flows that make SCIM setup seamless for IT administrators.

Identity & Access Management Service Integration

  • Leverage your deep IAM experience to drive requirements for integrating with a wide variety of directories from on-prem Active Directory through Entra ID, Okta, Auth0, and more.
  • Ensure our platform supports mixed environments where customers operate both on-premises and cloud-based directories simultaneously.
  • Work cross-functionally to define how directory attributes map to roles, permissions, and organizational structures within our system.

Federation & Single Sign-On

  • Lead and contribute to the larger group product strategy for identity federation, including support for SAML 2.0 and OIDC/OAuth 2.0 based SSO integrations with major identity providers such as Microsoft Entra ID and Google Workspace.
  • Assist in the definition and refinement of the SP-initiated and IdP-initiated login flows, Just-In-Time (JIT) provisioning, and attribute mapping configuration experience.
  • Ensure our federation implementation supports advanced enterprise requirements such as signed assertions, encrypted tokens, and custom claim mappings.

Product Strategy & Roadmap

  • Define and own the multi-year roadmap for IAM capabilities, including authorization and provisioning.
  • Architect a strategy for uniform access management that eliminates fragmented authorization patterns, empowering developers to integrate workflows across products seamlessly and securely.
  • Partner with enterprise sales and customer success to identify and prioritize the IAM features that drive adoption and expansion.
  • Balance strategic platform investments with near-term customer needs, communicating trade-offs clearly to stakeholders

​Collaboration & Execution

  • Write detailed product requirements documents (PRDs) and user stories that give engineering clear acceptance criteria.
  • Collaborate with security, legal, and compliance teams to ensure our IAM features meet SOC 2, ISO 27001, and applicable data residency requirements.
  • Define and track key metrics for IAM feature adoption, SSO coverage, SCIM sync reliability, and provisioning error rates.
  • Identity and Access Management Service Integration

Essential Skills & Experience

  • 5+ years of product management experience with a deep focus on IAM, developer infrastructure, or enterprise SaaS.
  • Expert-level knowledge of identity protocols including SCIM 2.0, SAML 2.0, OIDC, and OAuth 2.0.
  • Proven track record of defining complex multi-tenancy models and Organization structures for enterprise scale.
  • Technical fluency in defining API documentation, authentication flows, and system architecture diagrams.

Bonus Points For

  • Experience building enterprise-grade IAM from the ground up or working with providers like Okta and Google Workspace.
  • Knowledge of Zero Trust architecture principles or Privileged Access Management (PAM).
  • Professional security certifications such as CIAM or CISSP.

Logistics

Location: Westminster, CO

Travel Requirement: 10%

Work Schedule: In office 4 days a week, 1 day from home

Why You'll Love Working With Us

At Trimble, we're not just a company that "does good"—we are a team dedicated to making a tangible, positive Real-World Impact. We build innovative solutions designed to solve the world's most critical challenges. From construction sites to transportation hubs, our work tangibly improves how people live, build, move, and grow.

You'll work on projects that truly matter: Our purpose-driven culture means you'll be helping to build and deliver solutions that make work faster, safer, and more sustainable for millions of people worldwide. Our impact is tangible, from connected machines that save fuel to data-driven insights that reduce waste.

Collaborate with like-minded people: Our strong internal culture is a "hidden gem." You will work with a collaborative, supportive team that shares your purpose and fosters a genuine sense of belonging. We're a company of "visionary pragmatists" who think boldly and build things that work.

Be an owner: Trimble thrives on individuals who take initiative and embrace ownership. You'll find an entrepreneurial spirit where success is often "self-authored," empowering proactive "doers."

Product Manager, IAM, Identity and Access Management, SCIM, SAML, OAuth, SaaS, Cybersecurity, Product Management, Enterprise Software, SSO, Okta, Azure AD, Entra ID

Compensation: Trimble provides the following compensation range and general description of other compensation and benefits that it in good faith believes it might pay and/or offer for this position. This compensation range is based on a full time schedule. Trimble reserves the right to ultimately pay more or less than the posted range and offer additional benefits and other compensation, depending on circumstances not related to an applicant’s sex or other status protected by local, state, or federal law.

Hiring Range

$170,600.00–$234,600.00

Pay Rate Type

Salary

Bonus Eligible?

Yes

Commission Eligible?

No

Benefits: Trimble offers comprehensive core benefits that include Medical, Dental, Vision, Life, Disability, Time off plans and retirement plans. Most of our businesses also offer tax savings plans for health, dependent care and commuter expenses as well as Paid Parental Leave and Employee Stock Purchase Plan. If this position is identified above as commission- or bonus-eligible, the terms of the commission plan or discretionary bonus plan for which you are eligible will be provided following the employee start date.

How to Apply: Please submit an online application for this position by clicking on the ‘Apply Now’ button located in this posting.

Application Deadline: Trimble accepts applications on an ongoing basis until the position is filled.

At Trimble, we are committed to fostering a diverse, inclusive, and equitable workplace where everyone can thrive. Guided by our core values—Belong, Innovate, and Grow—we embrace and celebrate differences, knowing they make us stronger and more innovative. We are proud to be an equal opportunity employer, welcoming individuals of all backgrounds and advancing opportunities while embracing race, color, gender identity, sexual orientation, religion, disability, veteran status, or any other protected and diverse characteristic. We are committed to offering our candidates and employees with disabilities or sincerely held religious beliefs the ability to seek reasonable accommodations in accordance with applicable law and/or where it would not constitute undue hardship for Trimble. For more, please see Trimble's Code of Business Conduct and Ethics at https://investor.trimble.com, under “Corporate Governance.”

Our mission to transform the way the world works starts with transforming how we work together. By actively listening, asking questions, and taking intentional actions, we cultivate a culture that provides equitable opportunities for everyone to contribute and grow.

Candidate Privacy Notices by Country

If you need assistance or would like to request an accommodation in connection with the application process, please contact [email protected].

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against trimble's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on trimble's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    trimble's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.