Your missionWe're seeking a
Director, Product Management to join our Governance team. You'll drive product direction across human and agent identity, delegated and scoped authorization, credential brokering, audit and attribution for non-human actors (agents), and the emerging patterns the industry is still inventing including agent-to-agent auth, MCP auth, OAuth flows for autonomous callers, just-in-time elevation, sandboxing, policy-as-code for tool access and more.
This is a high-agency, AI-native role. You will not be running status meetings. You will be deep in the product: testing, prototyping with coding agents, talking to customers and FDEs, and turning what you learn into crisp direction for the engineers building it. Influence, not headcount, will your default leverage.
Your north star will be
enterprise trust translating into adoption: governance strict enough for the most regulated customers, and frictionless enough that builders don't route around it.
What you'll do at UiPath- Own the multi-year vision for identity, auth, and access governance across UiPath's agentic platform.
- Evolve how identity (for agents, robots and humans) works at UiPath (provisioning, scoping, delegation, attestation, rotation, revocation) and set the patterns the rest of the platform builds on.
- Drive the auth model for tool-calling and MCP: scoped consent, least-privilege execution, and audit trails that hold up in front of a compliance team.
- Partner with the largest and most regulated customers (financial services, healthcare, public sector) on production deployments. Go deep enough to know which specific control failed and what would fix it.
- Use the platform as a builder. Self-host, stand up agents, wire up auth flows, use coding agents aggressively to prototype and ship reference implementations. If you need a working example to make a point, build one.
- Translate emerging standards (delegated OAuth for agents, verifiable credentials, MCP auth, policy engines like OPA/Cedar) into a coherent UiPath point of view and a shipping product.
- Define the metrics that matter (e.g. time-to-grant, audit coverage, policy violations caught, developer friction) and prioritize ruthlessly.
- Represent UiPath's governance story externally with customers, partners, and industry forums. Build the credibility that makes CISOs say yes.
What you'll bring to the team- 10+ years in technical PM or eng roles with specific emphasis on security engineering, identity/IAM platform work, or technical GTM. Proven track record of shipping infrastructure enterprises trust.
- Deep fluency in identity and auth: OAuth 2.x/OIDC, SAML, SCIM, JWT, mTLS, secrets management, RBAC/ABAC, policy engines, audit and SIEM integration. You can read an auth flow and immediately see what's wrong with it.
- Working understanding of agentic AI (tool-calling, MCP, RAG, agent design patterns) and a clear view on how identity must evolve to support autonomous actors.
- Builder posture, AI-native. You write code (or prompt agents to) to test ideas and ship prototypes. You treat coding agents as leverage. You do not simply write specs or decks and wait.
- First-principles thinker, comfortable in ambiguity. Can produce a defensible direction in days, not quarters.
- Sharp communicator: a position doc that inspires bold decisions, a technical explanation a CISO trusts, a demo that closes the room.
- Comfortable with regulated, on-prem, and hybrid environments.
Ideal Background:- Shipped identity, auth, or security-platform products at a frontier lab, hyperscaler identity team, IAM vendor (Okta, Auth0, Entra, Ping), or as an early PM at a startup in the space.
- Has gone 0 16 1 and felt the weight of it. Startup or founding PM style experience strongly preferred.
- Has opinions about where agent identity is going in the next 24 months, with receipts.
Maybe you don't tick all the boxes above-but still think you'd be great for the job? Go ahead, apply anyway. Please. Because we know that experience comes in all shapes and sizes-and passion can't be learned.
Many of our roles allow for flexibility in when and where work gets done. Depending on the needs of the business and the role, the number of hybrid, office-based, and remote workers will vary from team to team. Applications are assessed on a rolling basis and there is no fixed deadline for this requisition. The application window may change depending on the volume of applications received or may close immediately if a qualified candidate is selected.
