Group Product Manager, AI Agent Security and Authorization

At Google, we put our users first. The world is always changing, so we need Product Managers who are continuously adapting and excited to work on products that affect millions of people every day.

In this role, you will work cross-functionally to guide products from conception to launch by connecting the technical and business worlds. You can break down complex problems into steps that drive product development.

One of the many reasons Google consistently brings innovative, world-changing products to market is because of the collaborative work we do in Product Management. Our team works closely with creative engineers, designers, marketers, etc. to help design and develop technologies that improve access to the world's information. We're responsible for guiding products throughout the execution cycle, focusing specifically on analyzing, positioning, packaging, promoting, and tailoring our solutions to our users.

Google’s Security and Privacy organization protects Google's users, data, and infrastructure against evolving security threats and compliance risks. Within this organization, the Identity and Access Management team builds the enterprise-grade authorization platforms that govern interactions with Google’s data and services—securing hundreds of thousands of internal identities, distinct workflows, and hundreds of millions of access requests per day. With the rapid adoption of Agentic AI—from AI coding assistants to autonomous team agents and AI-powered production workflows—these numbers are scaling rapidly, presenting novel and complex security challenges.

In this role, you will define and drive Google's Agentic AI Authorization Strategy, long-term security strategy, and collaborate with executive engineering leaders across major business units. You will pioneer zero-trust guardrails for autonomous agents, prevent credential over-provisioning, and deploy next-generation adaptive security systems.

The Core team builds the technical foundation behind Google’s flagship products. We are owners and advocates for the underlying design elements, developer platforms, product components, and infrastructure at Google. These are the essential building blocks for excellent, safe, and coherent experiences for our users and drive the pace of innovation for every developer. We look across Google’s products to build central solutions, break down technical barriers and strengthen existing systems. As the Core team, we have a mandate and a unique opportunity to impact important technical decisions across the company.

Individual pay is determined by factors including job-related skills, experience, and relevant education or training.

US: $240000 - $333000 (USD) + 25% bonus target + equity + benefits

Learn more about benefits at Google.

Responsibilities:

• Define and progress the strategic plans for Google's agent authorization model, balancing high operational velocity with zero-trust security controls across all development and production environments.
• Influence holistic and long-term strategy for agent access control, partnering with identity platform PMs and token specification owners to define how Google restricts agent access using cryptographic tokens and scopes across all services.
• Solve challenges in authorization across service meshes, designing original approaches for routing and inspecting agent-initiated credentials.
• Serve as the domain expert for agentic access security, advising executive directors and Vice President's across AI Research, Cloud, Productivity, and Core Infrastructure on secure agent architectures.
• Drive innovation in security models by replacing manual compliance exceptions with policy frameworks and standardized agent integration software development kits (SDKs), empowering product teams to innovate at AI speed while maintaining company-level security commitments.

Minimum qualifications:

• Bachelor's degree or equivalent practical experience.
• 10 years of product management experience in security, cloud infrastructure, identity and access management (IAM), enterprise platforms, or AI/ML systems.
• 5 years of experience taking technical products from conception to launch (e.g., ideation to execution, end-to-end, 0 to 1, etc.).
• Experience in enterprise security architecture, including zero-trust models, OAuth, service mesh authorization (RPC/HTTP), and capability-based tokens (e.g., Macaroons).
• Experience designing secure AI agent systems, including tool-calling, prompt safety, and exfiltration prevention.
• Experience leading distributed engineering organizations.

Preferred qualifications:

• Master's degree in a technology or business related field.
• Experience with large-scale enterprise security and authorization infrastructure (e.g., zero-trust proxies, identity-aware access controls, distributed databases, RPC frameworks, and sandboxed developer/agent runtimes).
• Experience building or securing LLM-driven agents, verifiable cryptographic credentials, or automated vulnerability detection platforms.
• Experience designing intuitive, low-toil developer tools and SDKs that make agent security the default, easiest path for engineers.
• Proficiency in SQL and distributed databases with the ability to analyze massive-scale remote procedure call (RPC) log streams to establish quantitative risk metrics and clear product requirements.