About this opportunity
Original employer descriptionThe application window is expected to close on: 10/26/2026
Who We Are
Today’s demanding business environment is more than that – it’s a period of disruption between the pandemic, global business change, and internal process complexity. For us to focus on simplicity and the best customer experience, we need great talent and the right abilities to be successful.
Cisco is transforming to become the world's leading security company. As part of this initiative, our Security Operations & Technology organization is adopting best-in-class tools, standards, and practices. Identity is at the heart of this transformation, making this an exciting time to join our team. Security Operations Team is changing the way we run Cisco’s Identity and Access management by improving the power of technology, the best of business processes. Together, we will Reinvent the Cisco experience.
Please join us and make this journey together!
What You'll Do
We are looking for a dedicated Engineering Product Manager to join our team in developing and refining access controls within our Authorization and Identity Governance system. The ideal candidate will specialize in crafting, deploying, and optimizing policies within the Authorization platforms like PlainID, SailPoint, Active Directory, SnowFlake to ensure secure, efficient, and scalable access management across our enterprise systems.
Key Responsibilities would include:
- Develop roadmap for onboarding enterprise applications onto the central IAM/IGA platform.
- Develop roadmap that includes both feature delivery (e.g., Segregation of Duties (SoD) checks, Training Mandates, Bulk Approvals) and platform initiatives (e.g., Deploying and Managing the underlying infra, improving CICD processes).
- Planning for the platform's scalability to handle future growth in users and integrated applications.
- Design, implement, and manage sophisticated access control policies within PlainID to meet our dynamic business requirements.
- Create and manage the release schedule for the IGA platform, including major, minor, and patch releases.
- Manage the release planning meetings and formal Go/No-Go meetings with all customers.
- Manage the CI/CD pipeline as a product, prioritizing work to improve its speed and reliability.
- Work closely with IT, security teams, and business customers to gather requirements and translate business needs into effective policy solutions.
- Ensure the integrity, confidentiality, and availability of information accessed through policy enforcement.
- Perform ongoing maintenance, updates, and refinements to existing policies to adapt to changing security landscapes and business needs.
- Solve policy-related issues, access provisioning issues providing timely and accurate resolution to ensure uninterrupted access control services.
- Document policy configurations and changes, maintaining clear and comprehensive records for audit and compliance purposes.
- Engage in knowledge sharing and standards within the team to foster a culture of continuous improvement in policy management.
- Provide technical expertise and guidance in the area of access control, including role-based access control (RBAC), attribute-based access control (ABAC), PBAC and IGA
- Serve as the authority for PlainID and SailPoint IGA within the organization, offering training and support to IT staff and end-users.
Who You'll Work With
The Security and Trust organization is passionate about technology not just to be innovative, but we transform innovation into value for Cisco. We are responsible for delivering world-class capabilities that enable Cisco employees, Customers and Partners to transform their experience. Our customers are not just industry leaders but are redefining the world through the empowerment of technology - with Cisco by their side.
On a daily & weekly basis you will interact with key business partners in various multi-functional teams within Security and Trust Office, Infrastructure, Legal, Business Operations, and Customer/Partner Experience teams. You will work with the Business and Technical Architecture Groups, Product Owners, Development Team leads, Multi-functional teams.
Who You Are
A hardworking and experienced professional who enjoys digging into complicated problems and exploring details of technical implementations. Someone who has a clear passion for solving functional challenges using technology and thrives in bringing clarity to ambiguous situations. A standout colleague capable of influencing within and outside of the team, as well as being an agent for change and transformation. Someone with an ability to take the lead in developing business solutions and clearly communicate complex concepts. Our minimum requirements are as follows:
- Bachelor’s or Master’s degree in Computer Science, Information Systems, or a related field, or equivalent work experience.
- 12+ years of experience in cybersecurity domain with IGA, RBAC, ABAC, PBAC understanding.
- Demonstrated experience with SailPoint, PlainID or similar PBAC systems, with a solid understanding of policy languages such as XACML or REGO.
- Demonstrated experience with SnowFlake, AirFlow, SFDC, Google BigQuery, Mulesoft, REST, OpenShift, Dockers, Kubernates, AWS.
- Familiarity with IAM concepts and technologies, with a focus on policy-based access control mechanisms.
- Good background in integrating IAM solutions with enterprise systems such as ERP, CRM etc.
- Experience with directory services (e.g., LDAP, Active Directory) and federated identity protocols (e.g., SAML, OpenID Connect, OAuth).
- Familiarity with programming and scripting languages (e.g., Java, Python, PowerShell).
- Ability to analyze complex systems and data to develop effective access control solutions.
- Strong problem-solving, analytical, and critical thinking skills.
- Good communication skills, with the ability to collaborate effectively across diverse teams and customers.
- Knowledge of security standards and compliance frameworks relevant to access management..
Why Cisco
#WeAreCisco, where each person is unique, but we bring our talents to work as a team and make a difference powering an expansive future for all.
We adopt digital, and help our customers implement change in their digital businesses. Some may think we’re “old” (36 years strong) and only about hardware, but we’re also a software company. And a security company. We even invented an intuitive network that adapts, predicts, learns and protects. No other company can do what we do – you can’t put us in a box!
But “Digital Transformation” is an empty buzz phrase without a culture that allows for innovation, creativity, and yes, even failure (if you learn from it.)
Day to day, we focus on the give and take. We give our best, give our egos a break, and give of ourselves (because giving back is built into our DNA.) We take accountability, bold steps, and take difference to heart. Because without diversity of thought and a dedication to equality for all, there is no moving forward.
So, you have colorful hair? Don’t care. Tattoos? Show off your ink. Like polka dots? That’s cool. Pop culture geek? Many of us are. Passion for technology and world changing? Be you, with us!
Why Cisco?
At Cisco, we’re revolutionizing how data and infrastructure connect and protect organizations in the AI era – and beyond. We’ve been innovating fearlessly for 40 years to create solutions that power how humans and technology work together across the physical and digital worlds. These solutions provide customers with unparalleled security, visibility, and insights across the entire digital footprint.
Fueled by the depth and breadth of our technology, we experiment and create meaningful solutions. Add to that our worldwide network of doers and experts, and you’ll see that the opportunities to grow and build are limitless. We work as a team, collaborating with empathy to make really big things happen on a global scale. Because our solutions are everywhere, our impact is everywhere.
We are Cisco, and our power starts with you.
Message to applicants applying to work in the U.S. and/or Canada:
The starting salary range posted for this position is $130,500.00 to $175,000.00 and reflects the projected salary range for new hires in this position in U.S. and/or Canada locations, not including incentive compensation*, equity, or benefits.
Individual pay is determined by the candidate's hiring location, market conditions, job-related skillset, experience, qualifications, education, certifications, and/or training. The full salary range for certain locations is listed below. For locations not listed below, the recruiter can share more details about compensation for the role in your location during the hiring process.
U.S. employees are offered benefits, subject to Cisco’s plan eligibility rules, which include medical, dental and vision insurance, a 401(k) plan with a Cisco matching contribution, paid parental leave, short and long-term disability coverage, and basic life insurance. Please see the Cisco careers site to discover more benefits and perks. Employees may be eligible to receive grants of Cisco restricted stock units, which vest following continued employment with Cisco for defined periods of time.
U.S. employees are eligible for paid time away as described below, subject to Cisco’s policies:
10 paid holidays per full calendar year, plus 1 floating holiday for non-exempt employees
1 paid day off for employee’s birthday, paid year-end holiday shutdown, and 4 paid days off for personal wellness determined by Cisco
Non-exempt employees** receive 16 days of paid vacation time per full calendar year, accrued at rate of 4.92 hours per pay period for full-time employees
Exempt employees participate in Cisco’s flexible vacation time off program, which has no defined limit on how much vacation time eligible employees may use (subject to availability and some business limitations)
80 hours of sick time off provided on hire date and each January 1st thereafter, and up to 80 hours of unused sick time carried forward from one calendar year to the next
Additional paid time away may be requested to deal with critical or emergency issues for family members
Optional 10 paid days per full calendar year to volunteer
For non-sales roles, employees are also eligible to earn annual bonuses subject to Cisco’s policies.
Employees on sales plans earn performance-based incentive pay on top of their base salary, which is split between quota and non-quota components, subject to the applicable Cisco plan. For quota-based incentive pay, Cisco typically pays as follows:
.75% of incentive target for each 1% of revenue attainment up to 50% of quota;
1.5% of incentive target for each 1% of attainment between 50% and 75%;
1% of incentive target for each 1% of attainment between 75% and 100%; and
Once performance exceeds 100% attainment, incentive rates are at or above 1% for each 1% of attainment with no cap on incentive compensation.
For non-quota-based sales performance elements such as strategic sales objectives, Cisco may pay 0% up to 125% of target. Cisco sales plans do not have a minimum threshold of performance for sales incentive compensation to be paid.
The applicable full salary ranges for this position, by specific state, are listed below:
New York City Metro Area:
$161,400.00 - $241,100.00
Non-Metro New York state & Washington state:
$141,500.00 - $214,400.00
* For quota-based sales roles on Cisco’s sales plan, the ranges provided in this posting include base pay and sales target incentive compensation combined.
** Employees in Illinois, whether exempt or non-exempt, will participate in a unique time off program to meet local requirements.
