Staff Product Manager, Identity & Access Management

Staff Product Manager, Identity & Access Management

San Francisco, CA

Want to help us help others? We're hiring!

GoFundMe is the world's most powerful community for good, dedicated to helping people help each other. By uniting individuals and nonprofits in one place, GoFundMe makes it easy and safe for people to ask for help and support causes—for themselves and each other. Together, our community has raised more than $40 billion since 2010.

Candidates considered for this role will be located in the San Francisco, Bay Area. There will be an in-office requirement of 3x a week. About the Role

We are hiring a Staff Product Manager to build and scale GoFundMe's Identity and Access Management platform. This role is focused on secure and low-friction login, verification, session security, account recovery, and the practical authorization needs that come with operating a trusted platform.

AI proficiency is a core expectation for this role. We want someone who is comfortable using AI day to day to move faster and who can also take an AI- and machine-learning-driven approach to account protection and operational workflows where it makes sense. The bar is building systems that are accurate, measurable, and trustworthy.

We need a builder. Someone who has shipped identity systems in production and can do 0 to 1 and 1 to 100 work. This is not a role for someone whose main experience is maintaining a mature stack with incremental roadmap updates.

What you'll do

• Own the strategy and execution for identity and account access across login, MFA, passkeys/WebAuthn, session management, and account recovery
• Drive measurable improvements across security and user outcomes, including login success, recovery success, conversion, ATO reduction, and reliability
• Lead 0 to 1 builds and 1 to 100 rollouts, including migrations from legacy flows with strong launch discipline, monitoring, and rollback plans
• Partner deeply with Engineering and Security on threat modeling and abuse cases, including recovery abuse, then turn those learnings into product and platform changes
• Build platform primitives, APIs, and shared components that other teams adopt, and drive adoption through documentation and enablement
• Own key authorization surfaces that matter to the platform today, such as admin access controls, roles, and permissions for internal tools, and auditing
• Make build vs buy decisions and lead vendor evaluations and integrations when needed, with a clear view of long-term operability and risk

What you bring Hands-on identity depth

• Proven experience shipping identity and access systems end-to-end in production, with clear decision ownership
• Strong familiarity with modern authentication patterns, including MFA, passkeys/WebAuthn, session security, and account recovery design
• Working knowledge of OAuth 2.0 and OIDC. Familiarity with SSO and SAML is a plus

Builder mindset and execution

• Strong examples of building from scratch and then scaling, with real rollout discipline and measurable outcomes
• Strong judgment balancing security, user experience, and operational risk
• Comfortable in technical conversations and able to explain tradeoffs clearly to non-technical stakeholders

Leadership behaviors

• High autonomy: you find problems and opportunities, form a point of view, and drive execution without waiting for perfect inputs or top-down direction
• Strong cross-functional leadership with Engineering, Security, Data, and other product teams

AI proficiency (core)

• Uses AI tools in daily work to move faster and produce higher quality outputs (analysis, synthesis, PRDs/RFCs, experiment plans, incident or launch retros)
• Experience partnering with data science or ML engineers to ship model-driven or AI-assisted capabilities, with clear success metrics and monitoring
• Strong instincts around responsible use in a security-sensitive domain: quality, failure modes, guardrails, privacy and data handling, and human review where required

Nice to Have

• Experience with ATO investigations, fraud defenses, and incident response
• Prior experience as a software engineer, especially in security, infrastructure, or platform domains
• Experience improving device and risk signals, detection feedback loops, and operational tooling around account security

Why you'll love it here

• Make an Impact: Be part of a mission-driven organization making a positive difference in millions of lives every year.
• Innovative Environment: Work with a diverse, passionate, and talented team in a fast-paced, forward-thinking atmosphere.
• Collaborative Team: Join a fun and collaborative team that works hard and celebrates success together.
• Competitive Benefits: Enjoy competitive pay and comprehensive healthcare benefits.
• Holistic Support: Enjoy financial assistance for things like hybrid work, family planning, along with generous parental leave, flexible time-off policies, and mental health and wellness resources to support your overall well-being.
• Growth Opportunities: Participate in learning, development, and recognition programs to help you thrive and grow.
• Commitment to DEI: Contribute to diversity, equity, and inclusion through ongoing initiatives and employee resource groups.
• Community Engagement: Make a difference through our volunteering program.

We live by our core values: impatient to be great, find a way, earn trust every day, fueled by purpose. Be a part of something bigger with us!

GoFundMe is proud to be an equal opportunity employer that actively pursues candidates of diverse backgrounds and experiences. We do not discriminate on the basis of race, color, religion, ethnicity, nationality or national origin, sex, sexual orientation, gender, gender identity or expression, pregnancy status, marital status, age, medical condition, mental or physical disability, or military or veteran status.

The annual U.S. salary range for this full-time position is $181,000 - $240,000. The company also offers equity and other benefits to employees, including healthcare, dental, vision, life insurance and 401(k) saving program. In addition to this wage, there are geolocation differentials that will increase pay depending on the work location. Additionally pay may vary depending on other factors including skills, experience, education, or training. Your recruiter can share more about the specific total compensation package based on your location during the hiring process.

If you require a reasonable accommodation to complete a job application or a job interview or to otherwise participate in the hiring process, please contact us at View email address on click.appcast.io.

Global Data Privacy Notice for Job Candidates and Applicants: Depending on your location, the General Data Protection Regulation (GDPR) or certain US privacy laws may regulate the way we manage the data of job applicants. Our full notice outlining how data will be processed as part of the application procedure for applicable locations is available here. By submitting your application, you are agreeing to our use and processing of your data as required.

Learn more about GoFundMe:

We're proud to partner with GoFundMe.org, an independent public charity, to extend the reach and impact of our generous community, while helping drive critical social change. You can learn more about GoFundMe.org's activities and impact in their FY '25 annual report.

Our annual "Year in Help" report reflects our community's impact in advancing our mission of helping people help each other.

For recent company news and announcements, visit our Newsroom.