We are looking for a technically deep Engineering Manager to lead our Security Product Engineering team. This team owns the authentication and authorization services that underpin the entire ActiveCampaign platform — the systems that determine who gets in, what they can do, and how we prove it. You will also drive the consolidation of identity services onto a centralized platform and mature the broader platform security.
This is a high-impact, player-coach role. You will lead a small, experienced team of 4–5 engineers while staying close enough to the code and architecture to make real technical decisions. You will directly report to our Head of Global Security, Risk and Compliance and partner closely with Platform Engineering, Product, and other security functions to translate complex security requirements into seamless, centralized identity services. You aren’t just approving decisions; you are deep in the architecture, guiding a senior team to eliminate technical debt and build a hardened, "security-by-default" future that directly enables our company’s global trajectory.
On a typical day, you might:
Lead and develop a team of senior and staff-level engineers — provide hands-on technical mentorship, clear prioritization, and career development that keeps strong ICs engaged.
Spearhead the migration and standardization of identity services onto a centralized platform, partnering with Platform Engineering on the long-term architecture.
Drive operational excellence by hardening the existing identity stack, reducing incident frequency, and building the observability and rigor necessary to run mission-critical infrastructure.
Participate in architectural and code reviews — you should be able to evaluate an identity flow, review a platform configuration, or debug a token validation issue alongside your engineers.
Partner with engineering teams across the organization to improve their integration experience with identity services — better documentation, clearer APIs, faster onboarding.
Collaborate with security and compliance teams to ensure identity architecture supports regulatory requirements and fraud prevention initiatives.
Shape the security culture by moving the team toward broader platform security concerns, establishing secure development patterns that allow other engineering teams to build with confidence.
Represent the team in incident reviews and cross-functional planning, translating high-level security trade-offs for non-technical audiences without losing the underlying substance.
The ideal candidate will bring:
5+ years of hands-on software engineering experience with significant depth in identity, authentication, or authorization systems—you have built and operated these systems at scale.
3+ years of engineering management experience leading engineers (not just tech-leading projects) — you know how to run effective 1:1s, give hard feedback, and create clarity in ambiguous environments.
Hands-on, current technical skills — you can read and review code, evaluate architecture decisions, and credibly challenge or support your team's technical direction.
Proven success in system consolidation, ideally having led the migration from legacy or bespoke auth implementations to standardized, centralized platforms.
Strong understanding of modern identity protocols and standards (authentication, authorization, federation, token-based architectures).
Strategic vision to see beyond identity, with a background in infrastructure hardening and secure development lifecycles (SDLC).
Strong communication skills — you can translate identity and security concepts for product managers, platform engineers, and executives without losing the technical substance.
Bonus:
Experience working in a SaaS environment with multi-tenant identity concerns and the security implications that come with them.