Job description

As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. We work on large scale distributed systems, processing almost 3 trillion events per day and this traffic is growing daily. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We re proud to work for a mission-driven company leveraging AI to transform the way we work. CrowdStrikers drive their careers through flexibility and autonomy while also being expected to contribute to a culture of responsible AI adoption, experimentation, and innovation. We use an AI-first mindset as a force multiplier to proactively and continuously accelerate execution, build expertise, uncover insights, and solve complex problems. We’re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you. About the Role: Privileged access delivers the keys to the kingdom and must be protected. Adversaries don t need to break through a firewall when they can hijack an administrative account, extract a hardcoded secret, or ride an active privileged session. Traditional Privileged Access Management (PAM) solutions rely on heavy, friction-filled processes that vault shared credentials and leave gaps in modern, dynamic environments. Enterprises are modernizing their identity management services, moving beyond traditional PAM and vaults, to just-it-time, continuous identity solutions that enforce contextual policies to deliver access only when appropriate, not before or after. This role owns CrowdStrike Falcon Privileged Access, focusing on eliminating standing privileges and shrinking the attack surface without hindering productivity. You will define the future of how we enforce Just-In-Time (JIT) access, secure secrets, broker isolated administrative sessions, and integrate privileged context directly with our endpoint and cloud telemetry. It s an area with significant scope for a Sr. Product Manager to disrupt legacy approaches and define a frictionless, AI-native PAM strategy. This is a hybrid position requiring at least 2 days a week in the office at our NYC, Boston, Arlington or Toronto, Canada office locations. What You ll Do: Own the transition to continuous identity and modern PAM: Define the product strategy to deliver market leading, modern privileged access and zero standing privileges across endpoints, infrastructure, and cloud environments. Deliver best-in-class user experiences for privilege elevation: Work with Product Designers to deliver multi-channel user experiences that provide end users and administrators experiences that are in the flow of work, easy to use and ideally completely transparent, operating in the background. Leverage the power of the CrowdStrike Falcon platform: Every privileged management decision is better when informed by contextual security and business data about the user, their device, and the target resource. You ll work across product teams to deliver privileged access that leverages the rich security data, threat analysis, security controls, process automation and AI capabilities of the Falcon platform Be the expert: Serve as the expert for Falcon Privileged Access to all internal and external parties. You will deliver core messaging, enablement materials, demos, and FAQs. You will also engage directly with internal teams, prospects and current customers to gather requirements, answer questions and convey our product vision and roadmap. Use AI agents as a core part of how you work: Research, analysis, spec iteration, and customer synthesis should run through agentic tooling as a default, not an occasional experiment. What You ll Need: Privileged Access and Identity Depth: Hands-on background in Privileged Access Management, secrets management, identity governance, or a closely adjacent technical domain. You know the friction points of legacy vendors (e.g., CyberArk, BeyondTrust, Delinea, HashiCorp) because you’ve worked with their products and their customers. Real understanding of how privilege elevation works across endpoint, applications, infrastructure and cloud; and the difference between assigned administrative roles and effective privileged access. Direct product experience with delivering just-in-time access through policy-driven provisioning operations that leverage direct connectors, claim-based authorization, and integrations with third party solutions. Real understanding of non-human identity (NHI): service accounts, workload identity, machine credentials, AI agents and secrets rotation. You know why securing machine-to-machine privilege is fundamentally different from human PAM. Fluency with core administrative protocols (SSH, RDP, Kerberos, LAPS) and where legacy vaulting and brokering architectures create operational bottlenecks or exploitable risk. Fluency with core identity providers (Entra ID, Okta, Ping, and similar) and identity protocols (oAuth, OIDC, SAML) and how they can be leveraged to deliver authentication, MFA and claims-based authorization. Product Management and Communication: 5 years in product management, with proven experience bringing products from 0 to 1 and scaling them once shipped. Comfortable driving ambiguous areas from problem definition to delivered product, without waiting for the spec to be handed to you. AI agents are a core part of how you work today: research, analysis, spec iteration, customer synthesis, stakeholder prep. You have formed specific opinions about which models, tools, and patterns work for PM work and which don t. Strong instinct for simplification: you ve taken something genuinely complex (a privileged access workflow, a session brokering architecture, a JIT approval matrix) and made it usable by someone who doesn t live in it every day. Able to mock and iterate on ideas rapidly using Claude Code, Lovable, Replit, or similar tools before anything touches design or engineering. When you come to a product discussion, you bring a working prototype or a concrete visual. Bring examples that show you ve done this. Able to explain a complex privileged risk concept in plain language to whoever is in front of you, whether that s an engineer, an executive, or a customer s audit team. Strong written communication across whatever format the work calls for: a spec, a prompt chain, an eval, a one-pager, a working prototype. Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes. Bonus Points: Prior experience with and broad knowledge of related Identity Management areas (SSO, MFA, IGA, SAML, OAuth, ITDR, ISPM, etc.) Prior experience successfully migrating customers off legacy PAM solutions. Prior work at a CrowdStrike partner, competitor, or large enterprise security team. Experience treating compliance and audit requirements (e.g., SOC2, PCI-DSS privileged access controls) as a product design constraint rather than a legal review step. Prior work in adversarial thinking, red-teaming, or threat modeling. #LI-IL1 #LI-DG1 Benefits of Working at CrowdStrike: Market leader in compensation and equity awards Comprehensive physical and mental wellness programs Competitive vacation and holidays for recharge Paid parental and adoption leaves Professional development opportunities for all employees regardless of level or role Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections Vibrant office culture with world class amenities Great Place to Work Certified™ across the globe CrowdStrike is proud to be an equal opportunity employer. We are committed to fostering a culture of belonging where everyone is valued for who they are and empowered to succeed. We support veterans and individuals with disabilities through our affirmative action program. CrowdStrike is committed to providing equal employment opportunity for all employees and applicants for employment. The Company does not discriminate in employment opportunities or practices on the basis of race, color, creed, ethnicity, religion, sex (including pregnancy or pregnancy-related medical conditions), sexual orientation, gender identity, marital or family status, veteran status, age, national origin, ancestry, physical disability (including HIV and AIDS), mental disability, medical condition, genetic information, membership or activity in a local human rights commission, status with regard to public assistance, or any other characteristic protected by law. We base all employment decisions--including recruitment, selection, training, compensation, benefits, discipline, promotions, transfers, lay-offs, return from lay-off, terminations and social/recreational programs--on valid job requirements. If you need assistance accessing or reviewing the information on this website or need help submitting an application for employment or requesting an accommodation, please contact us at recruiting crowdstrike.com for further assistance. Find out more about your rights as an applicant. CrowdStrike participates in the E-Verify program. Notice of E-Verify Participation Right to Work CrowdStrike, Inc. is committed to fair and equitable compensation practices. Placement within the pay range is dependent on a variety of factors including, but not limited to, relevant work experience, skills, certifications, job level, supervisory status, and location. The base salary range for this position for all U.S. candidates is $140,000 - $215,000 per year, with eligibility for bonuses, equity grants and a comprehensive benefits package that includes health insurance, 401k and paid time off. For detailed information about the U.S. benefits package, please click here . CrowdStrike Canada ULC is committed to equal pay for equal work in its compensation practices. The base salary range for this position in Canada is $150,000 - $200,000 CAD per year + variable/incentive compensation + equity + benefits. A candidate’s salary is determined by various factors including, but not limited to, relevant work experience, skills, certifications and location. This is Canadian-based employment, and it is expected that all employees maintain legal entitlement to work in Canada. Applicants selected to move forward in the hiring process are subject to background checks, including but not limited to criminal record, credit, and/or reference checks.

Requirements

Must-haves

This is a hybrid position requiring at least 2 days a week in the office at our NYC, Boston, Arlington or Toronto, Canada office locations.
Use AI agents as a core part of how you work: Research, analysis, spec iteration, and customer synthesis should run through agentic tooling as a default, not an occasional experiment.
Real understanding of how privilege elevation works across endpoint, applications, infrastructure and cloud; and the difference between assigned administrative roles and effective privileged access.
Direct product experience with delivering just-in-time access through policy-driven provisioning operations that leverage direct connectors, claim-based authorization, and integrations with third party solutions.
Fluency with core administrative protocols (SSH, RDP, Kerberos, LAPS) and where legacy vaulting and brokering architectures create operational bottlenecks or exploitable risk.
Fluency with core identity providers (Entra ID, Okta, Ping, and similar) and identity protocols (oAuth, OIDC, SAML) and how they can be leveraged to deliver authentication, MFA and claims-based authorization.
5 years in product management, with proven experience bringing products from 0 to 1 and scaling them once shipped.
Comfortable driving ambiguous areas from problem definition to delivered product, without waiting for the spec to be handed to you.
Able to explain a complex privileged risk concept in plain language to whoever is in front of you, whether that s an engineer, an executive, or a customer s audit team.
Strong written communication across whatever format the work calls for: a spec, a prompt chain, an eval, a one-pager, a working prototype.
Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes.
Market leader in compensation and equity awards
Comprehensive physical and mental wellness programs
Competitive vacation and holidays for recharge
Paid parental and adoption leaves
Professional development opportunities for all employees regardless of level or role
Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections
Vibrant office culture with world class amenities
Great Place to Work Certified™ across the globe

Nice-to-haves

Prior experience with and broad knowledge of related Identity Management areas (SSO, MFA, IGA, SAML, OAuth, ITDR, ISPM, etc.)
Prior experience successfully migrating customers off legacy PAM solutions.
Prior work at a CrowdStrike partner, competitor, or large enterprise security team.
Experience treating compliance and audit requirements (e.g., SOC2, PCI-DSS privileged access controls) as a product design constraint rather than a legal review step.
Prior work in adversarial thinking, red-teaming, or threat modeling.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

Platform: workday
Effort: long

Benefits

Benefits detected in the listing.

Health Insurance

Vision

401k

Paid Time Off

Wellness

Professional Development