Technical Lead, Identity & Access Management

About Applied Intuition

Applied Intuition, Inc. is powering the future of physical AI. Founded in 2017 and now valued at $15 billion, the Silicon Valley company is creating the digital infrastructure needed to bring intelligence to every moving machine on the planet. Applied Intuition services the automotive, defense, trucking, construction, mining and agriculture industries in three core areas: tools and infrastructure, operating systems, and autonomy.

Eighteen of the top 20 global automakers, as well as the United States military and its allies, trust the company’s solutions to deliver physical intelligence. Applied Intuition is headquartered in Sunnyvale, California, with offices in Washington, D.C.;
San Diego;
Ft. Walton Beach, Florida;
Ann Arbor, Michigan;
London;
Stuttgart;
Munich;
Stockholm;
Bangalore;
Seoul; and Tokyo. Learn more at

We are an in-office company, and our expectation is that employees primarily work from their Applied Intuition office 5 days a week. However, we also recognize the importance of flexibility and trust our employees to manage their schedules responsibly. This may include occasional remote work, starting the day with morning meetings from home before heading to the office, or leaving earlier when needed to accommodate family commitments.

We are seeking a hands‑on Technical Lead to own identity end‑to‑end, from foundational IDP architecture through to privileged access, secrets management, and access governance for AI agents. This is a senior individual contributor role with broad technical scope and direct influence on identity engineering, security, and compliance outcomes. You will set direction, drive implementation, and operate as the primary identity expert across the organization.

• Define the long‑term IAM strategy, roadmap, and operating model across the enterprise and product ecosystem.
• Assess and mature the current‑state Identity Provider (IDP) architecture, identifying gaps and driving the path to a resilient, scalable design.
• Drive all identity systems toward Zero Trust principles - secure, scalable, and frictionless by default.
• Automate the full identity lifecycle beyond traditional IGA joiner‑mover‑leaver (JML) processes.
• Implement and enforce RBAC for human and non‑human identities at scale.
• Define and operationalize least‑privilege policies across all systems and environments.
• Centralize secrets management - keys, tokens, certificates - across cloud and enterprise environments.
• Design and deliver Privileged Access Management (PAM) for admin accounts spanning enterprise IT and cloud engineering.
• Implement a scalable access management model for AI agents and bots.
• Collaborate with IT Apps and infrastructure teams to enforce and enable SSO across the enterprise.
• Own the implementation and governance of authentication protocols (SAML, OIDC, OAuth 2.0) and modern identity standards.
• Partner with engineering, security, IT, compliance, and product teams to deliver access management capabilities that enable the business and satisfy audit requirements.
• Translate complex identity requirements into clear, executable technical plans and communicate tradeoffs to senior stakeholders.

• 8 - 12+ years in identity engineering, security engineering, or a closely related discipline.
• Hands‑on architecture or engineering experience in cloud environments (AWS, GCP, or Azure).
• Demonstrated track record of leading complex, cross‑functional IAM programs from design through production.
• Deep expertise in modern IAM technologies: directories (LDAP/AD), IDPs, federation, and authentication protocols (SAML, OIDC, OAuth 2.0).
• Practical experience implementing Zero Trust identity models and PAM frameworks.
• Strong understanding of identity governance, IGA tooling, and role lifecycle management.
• Hands‑on experience with secrets management platforms (e.g., Hashi Corp Vault, AWS Secrets Manager, GCP Secret Manager).
• Experience with non‑human identity and machine identity management in large‑scale environments.
• Experience building access controls for AI workloads, agents, or service accounts at scale.
• Familiarity with SCIM…