Product Manager, Identity

<div class="content-intro"><p>Thank you for considering Tailscale. If this job description resonates with you, please apply.&nbsp;<em data-stringify-type="italic">Frequently cited statistics show that people who identify with historically marginalized groups are likely to apply to jobs only if they meet 100% of the qualifications. </em><em data-stringify-type="italic">We encourage you to help us break that statistic!</em></p> <p><strong>About Tailscale&nbsp;</strong></p> <p>Tailscale is making safe connection effortless by delivering software that makes it easy to securely interconnect people and their devices, no matter where they are. From hobbyists to multinational corporations, teams of every size use Tailscale each day to protect their networks, share access to internal tools, and more. We're building a future for the Internet that's easy, sensible, and safe, like it used to be. Founded in 2019 and fully distributed, we're backed by Accel, CRV, Insight, Heavybit, and Uncork Capital.</p></div><h3><span style="font-size: 12pt;">About the Role</span></h3> <p>We are seeking a Product Manager to own Tailscale's Identity ecosystem — the bridge between our "Zero Trust" networking philosophy and the existing identity infrastructure our customers already rely on. Identity is the foundation of access control in Tailscale; if a user cannot authenticate or authorize correctly, the network cannot be secure. In this role, you will bridge the gap between complex security protocols (OIDC, SAML, SCIM) and a seamless, "it just works" user experience.</p> <p>The Identity portfolio covers the end-to-end lifecycle of a user and device within the tailnet:</p> <ul> <li><strong>Authentication:</strong> Integrating with external Identity Providers (IdPs) so users can log in using the credentials they already have (Okta, Azure AD, Google Workspace, etc.).</li> <li><strong>Authorization:</strong> Defining how roles, groups, and attributes translate into granular network access policies.</li> <li><strong>Lifecycle Management:</strong> Automating the onboarding, offboarding, and synchronization (SCIM) of users and devices as they change roles or leave organizations.</li> </ul> <p>These capabilities are where Tailscale meets the customer's existing security stack. Nearly every enterprise deployment begins with an identity integration, grows through complex multi-IdP setups, and increasingly depends on automated lifecycle management for production security.</p> <h3><span style="font-size: 12pt;">Key Responsibilities</span></h3> <ul> <li>Own the vision, strategy, and roadmap for Tailscale's Identity portfolio: workload and agent identity, SSO integrations, Directory Sync (SCIM), access controls and policy, user management.</li> <li>Own the operator experience for admins: How IT and security teams configure identity providers, audit authentication events, and manage user, workload, and agent access policies at scale, across the admin console, API, and clients.</li> <li>Build a best-in-class authentication experience for end-users: Save our users time and money by making every auth flow fast, secure, and intuitive.</li> <li>Partner closely across engineering, product, and design org to ensure Tailscale’s identity service meets the needs of the broader organization and integrates tightly with other platform components.</li> <li>Build systematic customer insight across the full spread of Tailscale users, from a homelab operator exposing a media server through Funnel to a regulated enterprise routing traffic across multi-region datacenters.</li> <li>Turn customer signal, support patterns, cross-product requests, and competitive dynamics into roadmap priorities</li> </ul> <h3><span style="font-size: 12pt;">What We Are Looking For</span></h3> <ul> <li>4–7 years in product management, with direct ownership of an identity product or platform.</li> <li>Strong technical fluency in identity protocols: Comfortable engaging engineers as a peer on OIDC, SAML, SCIM, WebAuthn, and OAuth flows.</li> <li>Experience shipping products for developer or security-focused audiences: You understand the friction points of modern IAM and know how to build tools that admins and developers actually enjoy using.</li> <li>Demonstrated ability to own a product area end to end: Strategy, roadmap, execution, and the customer relationships that keep you honest.</li> <li>Operational mindset: You understand that for an identity product, downtime or misconfiguration isn't just a bug—it’s a security event.</li> </ul> <h3><span style="font-size: 12pt;">Nice to Have</span></h3> <ul> <li>Hands-on experience with Tailscale at work or home.</li> <li>Background working with specific Identity Providers (Okta, Azure Entra ID/Active Directory, Google Workspace) or Identity-Aware Proxy (IAP) architectures.</li> <li>Experience with cloud-native identity concepts: service mesh, workload identity federation</li> <li>Public technical writing, conference talks, or open-source contributions in the security or identity space.</li> </ul> <p>As a company, we strive to maintain fair and equitable compensation practices within our team across all roles and all levels. Tailscale's compensation package includes base salary, equity, and comprehensive benefits. The salary range displayed on each job posting represents the target range for a new hire's base salary. Individual offers may vary based on experience and skill set.</p><div class="content-pay-transparency"><div class="pay-input"><div class="title">US Pay Range</div><div class="pay-range"><span>$177,000</span><span class="divider">&mdash;</span><span>$221,000 USD</span></div></div></div><div class="content-conclusion"><p><strong>What We Offer</strong></p> <ul> <li><strong>An inclusive, flexible environment where you can be your authentic self.</strong> We recognize the impact of diverse voices and backgrounds on the growth of our people, product, and company. And that flexibility in how and when you work empowers our team to integrate work and life.</li> <li><strong>A competitive total compensation package.</strong> This includes a base salary, an equity incentive plan and variable commission (for quota-based roles).</li> <li><strong>Comprehensive group benefits with no waiting period. </strong>Take advantage of coverage for health, vision, dental, and more for you and your family!</li> <li><strong>Remote first company</strong>—most of our teams work fully remotely. Enjoy a change of scenery wherever you can get wifi, participate in virtual and in-person social events, and leverage our corporate co-working program to visit WeWork (or other similar spaces near you). Some roles require in-office collaboration depending on team needs, which will be clearly noted in the job description.</li> <li><strong>Employer-funded retirement contributions. </strong>Tailscale will match your retirement contributions dollar-for-dollar, up to a maximum annual employer contribution equal to 0.75% of your eligible compensation.</li> <li><strong>Connect with other Tailscalars IRL. </strong>Attend our annual company retreat, participate in team off-sites, and collaborate in person with teammates across Canada, the United States, the United Kingdom, and Singapore. We support intentional in-person connection through team travel and distributed collaboration.<strong><br></strong></li> <li><strong>Support for your personal and professional development.</strong> Grow your career thoughtfully with $1500 USD annually for professional development, or take advantage of mentorship, coaching, and internal promotion opportunities.&nbsp;</li> <li><strong>Paid time off and a healthy work-life integration.&nbsp;</strong>Our flexible, paid time off program supports you for any situation life throws your way, whether moving homes or travelling the world!&nbsp;</li> <li><strong>A build-your-own home office setup. </strong>You choose your own company-owned laptop (Mac or PC), receive a monthly home internet reimbursement, and $500 USD to customize your workstation to make it your own.&nbsp;</li> <li><strong>Paid parental leave program</strong>. We care about your life outside of work and encourage new parents to take advantage of parental leave top-ups (20 weeks for birthing parents, 16 weeks for non-birthing parents).</li> </ul> <p><em>Tailscale is committed to providing an accessible and inclusive hiring process. If you require an accommodation at any stage of the recruitment process or related to any aspect of this role, please contact your recruiter.</em></p> <p><em>Our hiring process uses AI-assisted tools to help screen and assess candidates. All hiring decisions are made by people.</em></p> <p><em>Please be aware that legitimate emails from Tailscale's talent team will only originate from @tailscale.com, @greenhouse.io, and @interviews.modernloop.io email addresses. For more information about protecting yourself from impersonators and scams, please visit <a href="https://tailscale.com/scam-awareness">https://tailscale.com/scam-awareness</a>.</em></p></div>