About the teamIAM is the nerve center of Stripe. We control how millions of businesses grant access to their account, including employees, AI agents, apps, and API integrations, across the Dashboard, API, CLI, and MCP. We're also a platform team, building the unified, fine-grained permissions model that every product at Stripe builds on.
AI agents are changing how businesses operate, and how they get authorized, governed, and secured is being defined right now-largely by us. We build for solo founders and Fortune 500s alike, and the tension between those two is where the real product work lives.
What you'll doYou'll set the vision and drive the roadmap for how every principal, human, agent, or app, gets access to a Stripe account. You'll do it by talking directly to the founders, admins, and developers who use it.
- Design the experience of granting access, everywhere. Signing up, inviting a teammate, creating an API key, authorizing an agent or a third-party app.
- Make agents a first-class citizen. Define how agents authenticate, what they're allowed to do, and how businesses stay in control, including approvals and human-in-the-loop checkpoints for the actions that matter most. You're defining an experience that will set the industry standard.
- Drive least privilege, made easy. Build custom roles, smart permission defaults, and usage-based recommendations that make the secure choice the obvious one instead of the tedious one.
- Push toward a world without secrets. Make secretless authentication (Workload Identity Federation) the default way developers integrate with Stripe, eliminating API key leaks as a category of risk rather than reducing their blast radius.
- Partner across nearly all of Stripe. Pitch an ambitious vision, then get teams across Dashboard, API Platform, Security, Payments and Money Movement genuinely excited to build it with you, even though none of them report to you.
- Ship, learn, and iterate: Run experiments, follow real usage, and adjust quickly rather than waiting for the perfect plan.
Who you areWe're looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply.
The hardest part of this job, and the most fun, is the constant trade-off: usability vs. security, flexibility vs. simplicity. It takes taste to find a shape that feels effortless for a solo founder and holds up at Fortune 500 scale.
Minimum requirements- 5+ years in product management, shipping platform or infrastructure products that other teams build on
- Background in security, identity, auth, or developer platforms, or serious curiosity about the space
- A habit of talking to users to find the real problem, not the reported one
- Technical fluency to go deep with engineers on authorization and authentication design
- A bias toward experimentation over big-bang launches
- Comfort setting direction in a space that's still being invented, across teams you don't manage
