Engineering Manager, Access Management
Anthropic
About Anthropic
Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.
About the Role
We are seeking a Security Engineering Manager to lead our Access Management team. This team builds and operates the systems that control who and what can access Anthropic's infrastructure, data, and AI systems — our policy-based authorization engine, our centralized access-request and provisioning platform, and the audit tooling that keeps these systems accountable.
The central challenge is designing access controls that keep pace with Anthropic's rapid growth — scaling least-privilege enforcement across an expanding fleet of cloud infrastructure, AI systems, and SaaS tools while keeping engineers productive.
This includes a problem few companies have encountered yet: deciding how AI agents that work autonomously alongside human engineers should be granted and reviewed for access. You'll lead a small, high-impact team today and grow it as the company scales, partnering closely with IT, Security, GRC, and engineering teams across the organization.
What You'll Do:
- Lead, mentor, and grow a team of security engineers building access management infrastructure; you'll own hiring as the team scales
- Own the technical roadmap for our authorization engine, access-request platform, and related access control systems — making strategic decisions about what to build based on security risk and engineering velocity
- Drive least-privilege enforcement across public workloads, employees, SaaS applications, and internal tools, systematically identifying and eliminating over-provisioned access
- Evolve the RBAC model, automated provisioning, and the access-request platform end-to-end — request workflows, approval chains, HRIS sync, two-party controls, and integrations with downstream systems
- Contribute to the company's emerging agent access model — defining how AI agents are granted permissions and how those permissions are reviewed, so agents operate within the same least-privilege framework as human engineers
- Ensure access events are well-structured and queryable — building the data foundation that supports audit, access reviews, compliance reporting, and incident response
- Ensure the systems you build satisfy audit and regulatory requirements (SOC 2, ISO 27001, ISO 42001, HIPAA), partnering with GRC so compliance is a byproduct of good engineering rather than a separate workstream
- Partner across the organization with IT, GRC, People Operations, Security Engineering, Detection and Response, Research and Engineering teams to ensure access management serves the entire company while maintaining security foundations
Who You Are:
- 4+ years managing security, identity, or infrastructure engineering teams with a proven track record of high impact
- Experience building or operating enterprise access management systems — identity providers, access request workflows, automated provisioning, or directory services
- Understanding of IAM concepts: RBAC, ABAC, least privilege, separation of duties, access certification, and privileged access management
- Ability to evaluate security tradeoffs and make risk-based decisions across complex cloud environments
- Strong cross-functional collaboration skills, balancing security requirements with developer experience and velocity
- Clear and persuasive communicator in both writing and verbal settings
- Passionate about building diverse, high-performing teams and growing engineers in a fast-paced environment
- Low ego and high empathy
Strong candidates may also have:
- Experience delivering compliance-driven engineering projects (SOC 2, ISO 27001, ISO 42001, HIPAA) at a company undergoing rapid growth or regulatory maturation
- Familiarity with HRIS integrations for automated identity lifecycle management
- Experience implementing two-party control (dual approval) patterns for sensitive access
- Background in OAuth, OIDC, SAML, SCIM, or SPIFFE/SPIRE identity protocols
- Experience designing access management strategy for a company going through hypergrowth
- Understanding of common identity-based attack patterns — credential theft, lateral movement, privilege escalation — and how access controls mitigate them
- Experience with Google Workspace administration, GCP organization policies, or AWS IAM at scale
Deadline to Apply: None, applications will be received on a rolling basis.
The annual compensation range for this role is listed below.
For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role.
Logistics
Education requirements: We require at least a Bachelor's degree in a related field or equivalent experience.
Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices.
Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this.
We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed. Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team.
Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings.
How we're different
We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills.
The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences.
Come work with us!
Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process