Engineering Manager

The New York Times is seeking a hands-on technical leader to build and lead the team responsible for identity platforms and access orchestration across the enterprise. This role sits within the Cybersecurity Department, with a mandate covering the entire organization. You will own complex initiatives end-to-end, shape the long-term identity roadmap, and ensure that identity and access controls are secure, strategic, and scalable.

As a people manager with significant technical depth, you will coach and grow engineers while remaining close to the work to guide architecture and technical implementation. You will partner with teams across Cybersecurity and Technology to drive strategic work focused on automation, lifecycle workflows, and access governance. You will report to the Senior Director, Cybersecurity.

Responsibilities

• Own the strategic direction and multi-year roadmap for enterprise Identity and Access Management (IAM) initiatives, aligning with departmental and company objectives.
• Lead the execution of a Group Lifecycle Management strategy by leveraging a new Identity Governance and Administration (IGA) layer and help operationalize this strategy across relevant systems.
• Work with product and platform teams to model roles and access profiles that balance security and productivity.
• Partner with Enterprise Technology and Developer Platforms to implement and operate identity orchestration for provisioning, deprovisioning, and access reviews across key systems.
• Define and implement patterns for privileged access management and just-in-time elevation, especially for cloud and production roles.
• Act as a thought leader for Identity in cross-functional initiatives like conditional access which impact thousands of employees.
• Demonstrate support for journalistic independence and a strong commitment to the mission of seeking the truth and helping people understand the world.

Requirements

• 8+ years of experience in software engineering, security engineering, or identity engineering.
• 3+ years in an engineering management role.
• Experience designing and operating identity systems or platforms at scale, such as Entra/Azure AD, Active Directory, SSO, and federation (OIDC/SAML).
• Experience with SCIM-based provisioning and group lifecycle management.
• Experience with identity governance and access orchestration platforms (e.g., ConductorOne, SailPoint, Entra ID Governance, or similar).
• Strong understanding of security controls across multiple domains, including access management, authentication/authorization, privileged access, and endpoint/device posture.
• Hands-on familiarity with cloud platforms (AWS and/or GCP) and best practices for securing identity and access in those environments.
• Working knowledge of engineering practices (CI/CD, GitOps, IaC) and how identity and access controls integrate into those workflows.
• Familiarity with ConductorOne or similar identity orchestration platforms and experience implementing them.

Preferred Qualifications

• Experience leading or implementing Identity Governance and Administration (IGA) rollouts.
• Experience with conditional access and device trust strategies, such as hardware MFA and high-risk user/location controls.
• Experience with Terraform or similar IaC tools to manage Entra/AD, cloud IAM, and/or Google Org configuration.

Additional Information

This role may require limited on-call hours. An on-call schedule will be determined upon joining, taking into account team size and other variables.

Benefits

• Medical, dental, and vision benefits.
• Flexible Spending Accounts (F.S.A.s).
• Company-matching 401(k) plan.
• Paid vacation, paid sick days, and paid parental leave.
• Tuition reimbursement and professional development programs.