Head of Identity and Access Management

reflection • United States

Visa Sponsorship

This Job is No Longer Active This position is no longer accepting applications

AI Summary

Lead the architecture, development, and operation of Reflection's identity infrastructure, a critical security layer for an AI research lab. This role demands a blend of security architecture and software engineering to build a bleeding-edge, zero-trust identity system. Key responsibilities include mandating phishing-resistant authentication, engineering just-in-time credentialing, and developing dynamic authorization pipelines.

Key Highlights

Architect and operate a bleeding-edge, zero-trust identity architecture.

Mandate and enforce hardware-backed phishing-resistant authentication globally.

Build just-in-time credentialing systems for massive-scale compute environments.

Searching for Devops roles that provide visa sponsorship? Connect with international employers through Devops Jobs with Visa Sponsorship opportunities actively seeking talented professionals.

Key Responsibilities

Design and implement a resilient, cloud-native identity architecture leveraging modern IdPs and edge-enforced zero-trust access networks.

Architect and continuously evolve the organization’s identity boundary with a first-principles approach.

Own the full identity lifecycle architecture across corporate, production, and research environments.

Mandate and enforce hardware-backed authentication (YubiKeys/WebAuthn) globally.

Eliminate SMS, TOTP, and legacy MFA bypass vectors.

Design and operate zero-trust access controls that enforce least-privilege dynamically.

Build short-lived, just-in-time credentialing systems for engineering and research access to massive GPU clusters.

Replace SSH keys and long-lived credentials with ephemeral, short-lived certificate-based access.

Design and enforce privileged access workflows.

Architect SPIFFE/SPIRE or cloud-native cryptographic identity frameworks for service-to-service communication.

Ensure machine accounts, training jobs, and CI/CD pipelines use dynamic, short-lived tokens.

Maintain and evolve workload identity infrastructure as the compute environment scales.

Treat authorization policies as code using Open Policy Agent (OPA)/Rego, Cedar, or equivalent frameworks.

Integrate policy evaluation directly into developer workflows and infrastructure deployment pipelines.

Partner with engineering teams to design access models that make the secure path the path of least resistance.

Build automated provisioning and deprovisioning workflows via SCIM and API-first tooling.

Partner with Detection Engineering to instrument identity telemetry and build detection logic.

Continuously improve automation coverage across the identity stack.

Explore our comprehensive directory of visa sponsorship jobs from employers worldwide who are ready to sponsor talented international professionals.

Technical Skills Required

Identity and Access Management Zero Trust Architecture Cloud Security

Interested in opportunities specifically in United State? Discover our dedicated Visa Sponsorship Jobs in United State page featuring roles from top employers in this location.

Benefits & Perks

Top-tier compensation

Stock options

Comprehensive health & wellness

Paid parental leave

Unlimited paid time off (US)

30 days paid time off (UK)

Sponsorship support

Job Description

Reflection is a research lab making intelligence open and accessible for everyone to use, customize, and build on. We build open models that let anyone control their intelligence and help shape the future of AI. Our mission: make intelligence open and accessible to all.

Want the full job description? Read the complete details on LinkedIn, the original posting.

Continue on LinkedIn

This is a short excerpt. All rights to the full description belong to its original publisher.