Job description

From Fivetran’s founding until now, our mission has remained the same: to make access to data as simple and reliable as electricity. With Fivetran, customer data arrives in their warehouses, canonical and ready to query, with no engineering or maintenance required. We’re proud that more organizations continue to leverage our technology every day to become truly data-driven. About the Role Every enterprise adoption of dbt begins with a set of questions that have nothing to do with SQL. Can we prove who's logging in? Can we control what they touch? Can we run this inside our own network, in our own region, under our own compliance regime? You own the answer to all of it. As the Senior Product Manager for enterprise and deployments, you own the trust and access layer of the dbt platform — how people and organizations authenticate, what they're authorized to do, and where the platform actually runs. That spans the identity and auth primitives underneath the product (OAuth, account discovery), the enterprise security surface customers evaluate us on (SSO, SCIM, RBAC, PrivateLink), the first five minutes of every account (login, sign-up, invites, users, groups), and the deployment footprint itself, including expansion into new regions and cloud providers. This is foundational infrastructure work with an unusually short line to revenue. dbt is used by more than 100,000 open-source community members and tens of thousands of customers, and the constraint on the largest of them is rarely the product's capability — it's whether the trust layer clears their bar. When you get this right, you unlock new regions, new deployment models, and a class of customer we can't fully serve today. If you've watched a company like Auth0 turn deeply technical identity work into a product engineers actually love, this will feel familiar. You'll work across two engineering teams — IAM and Transport — and partner closely with security, infrastructure, compliance, and the field teams who live inside enterprise security reviews. dbt Labs recently merged with Fivetran to build the open data infrastructure layer that AI depends on, which means an established customer base and ARR momentum on one side and a genuinely new problem space on the other. In this role, you will: Own the roadmap for identity, access, and deployment across the dbt platform — from the auth primitives other teams build on to the admin surfaces customers configure themselves. Make enterprise security a reason we win, not a hurdle we clear. SSO, SCIM, RBAC, and PrivateLink are table stakes for the customers we're chasing; your job is to get them past table stakes and make administration something buyers remark on. Lead the single-tenant to multi-tenant migration — a multi-quarter program moving existing enterprise customers onto a modern deployment model without a visible seam, including account domain and subdomain changes. Unlock new geographies and clouds. Decide where we deploy next and what has to be true — data residency, regional isolation, cloud provider parity — to get there. Own the front door. Login, sign-up, and account discovery decide whether a new user reaches value or bounces, and whether a large organization can onboard thousands of people without filing a ticket. Give admins real leverage over users, groups, invites, and permissions, so provisioning at enterprise scale is self-serve rather than a support motion. Be the product voice in enterprise security reviews. Work with the field, security, and compliance to turn recurring blockers into roadmap, and turn roadmap into things sales can sell. Partner with infrastructure and platform teams on the telemetry and observability needed to operate this layer with confidence — and to know when it's degrading before a customer tells you. What success looks like: Security and architecture review stops being the thing that stalls enterprise deals; the questions we used to escalate now have documented answers in the product. Sign-up and login conversion improve while auth-related support volume goes down. Enterprise admins provision, de-provision, and audit their users without involving us. Engineering leadership treats you as the person who sets direction, not the person who writes tickets. You're a good fit if you have: 5+ years of product management experience , with meaningful time on identity, access management, security, or infrastructure products. Direct experience with authentication and authorization — SSO, SCIM, OAuth/OIDC, RBAC, identity providers. You've shipped in this space and have opinions about where the standards help and where they get in the way. Experience with multi-tenant SaaS deployment models — tenancy, isolation, regional expansion, and the migration paths between them. A strong technical foundation that lets you work as a genuine peer to engineering, reason about architecture, and hold your own in a design review. Comfort in front of enterprise customers , particularly their security and platform teams, and a track record of turning what you hear there into prioritized product work. Excellent written communication — crisp specs, clear tradeoffs, and the ability to explain a security decision to a security team and to a salesperson in the same week. Comfort operating asynchronously on a distributed team. We don't expect one person to be deep in every one of these. If you're strong in most of them and hungry about the rest, we want to talk. You'll have an edge if you have: Worked at an identity provider (Okta, Auth0, Entra) or on identity, access, or deployment products at a hyperscaler — AWS, Azure, or Google Cloud. Shipped private networking capabilities: PrivateLink, VPC peering, or customer-managed network isolation. Worked inside compliance frameworks — SOC 2, ISO 27001, FedRAMP, HIPAA, GDPR and data residency — as a product owner rather than an observer. Migrated a large existing customer base between deployment or tenancy models. Background in telemetry and observability for platform services. Hands-on experience with dbt, analytics engineering, or the modern data warehouse ecosystem (Snowflake, BigQuery, Databricks, Redshift). The compensation range displayed on this job posting reflects the minimum and maximum target for new hire compensation for the target position and level, and may include sales incentives or target bonuses depending on the role. Our compensation ranges are determined by role, level, and location. Our job titles may span more than one career level. Within the range, individual compensation is determined by additional factors, including job-related skills, experience, relevant education or training, business need, market demands. The compensation range is subject to change and may be modified in the future. Your recruiter can share more about the specific compensation range for your location during the hiring process. Oakland Pay Range $188,496 — $235,620 USD Perks and Benefits 100% employer-paid medical insurance * Generous paid time away from work, including paid vacation or flexible/unlimited vacation depending on role and country, plus paid sick time, inclusive parental leave, paid holidays, including a year-end Global Week of Rest, and volunteer days off. RSU stock grants* Professional development and training opportunities Company virtual happy hours, free food, and fun team-building activities Monthly cell phone stipend Access to an innovative mental health support platform that offers personalized care and resources in areas such as: therapy, coaching, and self-guided mindfulness exercises for all covered employees and their covered dependents. * May vary by country and worker type - please reach out to your recruiter for more information Click here to learn more about Fivetran's Benefits by Region. We’re honored to be valued at over $5.6 billion , but more importantly, we’re proud of our core values of Get Stuck In, Do the Right Thing, and One Team, One Dream . Read about us in Forbes . Fivetran brings together high-quality talent across the globe to make data access as easy and reliable as electricity for our customers. We value and recognize that our customers benefit from having innovative teams made of people from many backgrounds, experiences, and identities. Fivetran promotes diversity, equity, inclusion & belonging through attracting, recruiting, developing, and retaining a diverse workforce, not only because it is the right thing to do, but because it helps us build a world-class company to better serve our customers, our people and our communities. To learn more about Fivetran’s culture and what it’s like to be part of the team, click here and enjoy our video. To learn more about our candidate privacy policy, you can read our statement here . We are committed to ensuring that all candidates have an equal opportunity to participate in our interview process. If you require accommodations at any stage of the process due to a disability, medical condition, or any other circumstance, please don't hesitate to submit your request by filling out this form . We will work with you to provide reasonable accommodations to facilitate your participation and ensure a fair and accessible interview experience. Your request and any information provided will be kept confidential and will not impact your candidacy. We look forward to hearing from you and accommodating your needs to the best of our ability.

Requirements

Must-haves

Own the roadmap for identity, access, and deployment across the dbt platform — from the auth primitives other teams build on to the admin surfaces customers configure themselves.
Lead the single-tenant to multi-tenant migration — a multi-quarter program moving existing enterprise customers onto a modern deployment model without a visible seam, including account domain and subdomain changes.
Unlock new geographies and clouds. Decide where we deploy next and what has to be true — data residency, regional isolation, cloud provider parity — to get there.
Own the front door. Login, sign-up, and account discovery decide whether a new user reaches value or bounces, and whether a large organization can onboard thousands of people without filing a ticket.
Give admins real leverage over users, groups, invites, and permissions, so provisioning at enterprise scale is self-serve rather than a support motion.
Be the product voice in enterprise security reviews. Work with the field, security, and compliance to turn recurring blockers into roadmap, and turn roadmap into things sales can sell.
Partner with infrastructure and platform teams on the telemetry and observability needed to operate this layer with confidence — and to know when it's degrading before a customer tells you.
Security and architecture review stops being the thing that stalls enterprise deals; the questions we used to escalate now have documented answers in the product.
Sign-up and login conversion improve while auth-related support volume goes down.
Enterprise admins provision, de-provision, and audit their users without involving us.
Engineering leadership treats you as the person who sets direction, not the person who writes tickets.
5+ years of product management experience , with meaningful time on identity, access management, security, or infrastructure products.
Direct experience with authentication and authorization — SSO, SCIM, OAuth/OIDC, RBAC, identity providers. You've shipped in this space and have opinions about where the standards help and where they get in the way.
Experience with multi-tenant SaaS deployment models — tenancy, isolation, regional expansion, and the migration paths between them.
A strong technical foundation that lets you work as a genuine peer to engineering, reason about architecture, and hold your own in a design review.
Comfort in front of enterprise customers , particularly their security and platform teams, and a track record of turning what you hear there into prioritized product work.
Excellent written communication — crisp specs, clear tradeoffs, and the ability to explain a security decision to a security team and to a salesperson in the same week.
Comfort operating asynchronously on a distributed team.
We don't expect one person to be deep in every one of these. If you're strong in most of them and hungry about the rest, we want to talk.
Worked at an identity provider (Okta, Auth0, Entra) or on identity, access, or deployment products at a hyperscaler — AWS, Azure, or Google Cloud.
Shipped private networking capabilities: PrivateLink, VPC peering, or customer-managed network isolation.
Worked inside compliance frameworks — SOC 2, ISO 27001, FedRAMP, HIPAA, GDPR and data residency — as a product owner rather than an observer.
Migrated a large existing customer base between deployment or tenancy models.
Background in telemetry and observability for platform services.

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

sqlairestawsazure

Platform: greenhouse
Effort: quick

Benefits

Benefits detected in the listing.

Vision

Parental Leave

Professional Development