{"id":111874,"url":"https://alion.io/job/sailpoint-senior-technical-program-manager-security","title":"Senior Technical Program Manager, Security","company":{"id":4926,"name":"SailPoint","domain":"sailpoint.com","url":"https://alion.io/company/sailpoint","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":83,"open_postings":30,"ghost_share":0.033,"stale_share":0.533,"repost_share":0.1,"time_to_fill_p50_days":32,"computed_at":"2026-11-12T10:38:37Z"}},"role":"Product","role_family":"Product","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":132000,"max_usd":231000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":710},"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"API Gateway","optional":false},{"name":"CI/CD","optional":false},{"name":"Confluence","optional":false},{"name":"FedRAMP","optional":false},{"name":"FinOps","optional":false},{"name":"IAM","optional":false},{"name":"Jira","optional":false},{"name":"Machine Learning","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Red Teaming","optional":false}],"status":"live","first_seen_at":"2026-07-31T00:00:00Z","employer_posted_date":"2026-11-11","last_verified_at":"2026-11-12T18:30:32Z","board_verified":true,"closed_at":null,"days_open":105,"trust":{"level":"ghost","repost_count":2,"flags":["stale","repost"],"days_open":104},"description":"This is a remote role within the United States. Due to FedRAMP requirements, this role requires US citizenship.\nAbout SailPoint\nSailPoint leads in identity security for the cloud enterprise. Built on AI and machine learning, our Identity Security Cloud Platform delivers the right level of access to the right identities and resources at the right time-matching the scale, velocity, and evolving needs of today's modern enterprise.\nAbout the Role\nSailPoint is looking for a Technical Program Manager to serve as the operational backbone of a product security program running 12+ concurrent initiatives, a growing portfolio of BAU security operations, and coordination across every engineering organization in the company. You will drive execution across security architecture reviews, tooling evaluations, vendor procurements, pipeline buildout, and cross-functional programs spanning Product, Engineering, DevOps, Platform Engineering, and the CISO organization-work that goes well beyond routine status reporting.\nThe program spans near-term initiatives (production access controls, red team vendor engagement, SCM migration, CI/CD security gates, cloud asset tagging, MCP gateway, API gateway reviews), mid-term initiatives (customer code governance, BYOK architecture, reference architecture standup, non-human identity program), and continuous BAU activities (design reviews, security architecture reviews, AI security reviews, security champions, metrics and reporting, red team operations). You will own the operational rhythm that keeps all of this moving forward without anything falling through the cracks.\nAbout the Team\nYou will join our Engineering Operations team-the group that keeps SailPoint's engineering organization secure, compliant, and audit-ready as we scale. Engineering Operations sits at the intersection of Engineering, Product, and Compliance, removing friction, standardizing process, and ensuring the right evidence and controls are in place without slowing teams down.\nIn this role, you will work closely with Engineering Managers, security operations, platform teams, and leaders across Engineering and Cybersecurity. Together, we aim for predictable remediation throughput, transparent risk visibility, and a vulnerability management program that keeps pace with our product and cloud footprint.\nResponsibilities\nOwn end-to-end execution of 12+ concurrent product security initiatives across near-term, mid-term, and continuous horizons, keeping each with a current status, next milestone, owner, timeline, and documented dependencies.\nMaintain the initiative roadmap as a living document, run the weekly tracking cadence, flag drifting work, and escalate blockers before they become delays.\nMap and actively manage cross-team dependencies across DevOps, Platform Engineering, FinOps, Architecture, Product, Engineering Directors, and the CISO organization.\nBuild trusted relationships with engineering leaders whose teams support active initiatives, making cross-team coordination frictionless rather than adding process.\nManage the full vendor and procurement pipeline, giving every engagement a clear status, next action, owner, and timeline, and eliminating procurement surprises.\nDrive vendor engagements through the front door process, coordinating evaluators, scoping POCs, compiling results, and preparing decision packages for leadership.\nTrack recurring BAU work - design and architecture reviews, AI security reviews, red team operations, security champions, and metrics - against capacity so the Director can see where the team has room for additional work.\nProduce executive-ready status updates, quarterly program reviews, and decision packages that leadership uses to evaluate program health and make investment decisions.\nSteer the program with data such as aging, throughput, and SLA adherence, sizing risk in concrete terms for both technical and executive audiences.\nBuild and maintain program tracking in Jira and Confluence, establish a consistent intake process for new initiatives, and apply AI-assisted workflows with sound judgment about when automation helps and when human oversight is required.\nRoadmap for Success\nBy 30 days - Discovery & Assessment:\nComplete a thorough review of the initiative roadmap (12 initiatives across near-term and mid-term horizons), the BAU tracker (10 recurring activities with quarterly load allocations), and the quarter map that sequences all work. Understand the dependencies between initiatives, the staffing model, and where capacity is tight.\nMap every cross-team dependency. This program touches DevOps, Platform Engineering, FinOps, Architecture, Product, Engineering Directors, the CISO organization, and multiple vendor relationships. Build the dependency map and identify which dependencies are on track, at risk, or blocked.\nReview every active procurement and POC. Understand where each vendor engagement sits in the front door process, what the evaluation timeline looks like, who the decision makers are, and what approvals are still outstanding.\nEstablish the communication rhythm. Learn how the Director communicates with leadership and calibrate your reporting to support that cadence.\nBy 60 days - Own the Rhythm:\nTake full ownership of the weekly initiative tracking cadence. Run the weekly sync, maintain the roadmap tracker, flag initiatives that are drifting, and escalate blockers before they become delays.\nDrive at least one active procurement to completion or to the next milestone (vendor contract executed, POC scoped, or evaluation results compiled). Demonstrate that you can navigate the procurement process, coordinate evaluators, and deliver a decision package.\nBuild working relationships with every engineering director whose team is a dependency for an active initiative. They should know your name, understand your role, and see you as the person who makes cross-team coordination frictionless rather than adding process.\nBy 90 days - Program Structure & Execution:\nFull operational ownership of all 12 initiatives. Every initiative has a current status, a next milestone, an owner, a timeline, and a documented set of dependencies and blockers. Nothing is stale. Nothing is untracked.\nBAU load tracking operational. The team's recurring work (design reviews, architecture reviews, AI security reviews, red team operations, security champions, metrics) is tracked against capacity so the Director can see where the team is at capacity and where there is room for additional initiative work.\nVendor and procurement pipeline fully managed. Every active vendor engagement has a clear status, next action, owner, and timeline. Procurement surprises are eliminated.\nFirst quarterly program review prepared and delivered. Compile the quarter's progress into a single executive-ready document: initiatives completed, initiatives in flight, metrics movement, staffing utilization, and the plan for the next quarter.\nBy 6 months - Program Operating System:\nThe initiative roadmap is a living document that the entire team and stakeholders reference. Initiatives move between phases on a predictable cadence. New initiatives are scoped, staffed, and sequenced using a consistent intake process rather than ad hoc prioritization.\nCross-team dependencies are managed proactively. Engineering directors, DevOps, Platform Engineering, and the CISO organization experience the security program as organized and predictable rather than reactive. Commitments are tracked and met.\nMetrics and reporting are automated or semi-automated. The Director's executive updates, the team's KPI dashboard, and the initiative health tracker are maintained continuously, not assembled in a rush before each reporting cycle.\nAt least two initiatives have been driven to completion under your program management, with documented outcomes, lessons learned, and the transition to BAU or closure clearly executed.\nBy 1 year - Strategic Program Partner:\nThe product security program operates with the organizational discipline of a program three times its size. Initiatives are planned quarterly, tracked weekly, and reported on a cadence that leadership trusts. The Director spends time on strategy and stakeholder relationships, not on initiative tracking and cross-team coordination, because you own that entirely.\nYou are recognized by engineering leadership as the person who makes the security program operationally credible. When someone asks 'where does the security program stand on X,' they come to you, and you have the answer.\nProgram planning for the next fiscal year is driven by you. You compile the initiative proposals, the staffing model, the capacity analysis, and the quarter map for the Director's review and approval. The Director defines strategy; you translate strategy into an executable plan.\nBacklog and emerging items are actively managed. The pipeline of future work is scoped, sized, and sequenced so that when an emerging item becomes urgent, the intake process is ready.\nTo Be Successful in This Role You Must:\nStay highly organized-you will coordinate work across multiple Engineering and Security teams at the same time.\nBring deep program management experience in a fast-moving technology organization, with credibility in security or infrastructure contexts.\nApply strong technical judgment on vulnerability severity, remediation trade-offs, and cloud-native security risk.\nBuild trusted relationships across Engineering and Security; this is a people-facing role that drives outcomes through influence.\nCommunicate clearly to both technical and executive audiences, including sizing risk in concrete terms.\nStay data-driven-use metrics such as aging, throughput, and service-level agreement (SLA) adherence to steer the program, not anecdotes.\nHave deep experience with Jira and Confluence as the backbone of program planning and reporting.\nRequirements\n7+ years of technical program management experience, with at least 3 years managing security, infrastructure, or platform engineering programs.\nDemonstrated experience managing 10+ concurrent initiatives with cross-functional dependencies across engineering organizations.\nExperience managing vendor procurement processes for security or engineering tooling, including evaluations, POCs, and contract execution.\nFamiliarity with security program domains: application security, cloud security, DevSecOps, vulnerability management, and identity/access management. You do not need to be a practitioner, but you need to understand the landscape.\nProficiency with program management tooling (Jira, Confluence, spreadsheet-based trackers) and the ability to build and maintain program tracking without dedicated PMO infrastructure.\nStrong written communication. You will produce the executive status updates, quarterly reviews, and decision packages that leadership uses to evaluate program health and make investment decisions.\nBachelor's degree in a relevant field or equivalent experience.\nDesired Qualifications\nExperience building or maturing a security, infrastructure, or platform program operating model - intake, quarterly planning, weekly execution rhythm, BAU transition, and portfolio capacity planning across concurrent initiatives.\nPrior ownership of DevSecOps, CI/CD security, or SCM/toolchain programs (e.g., pipeline security gates, developer tooling migration, cloud asset governance).\nIdentity and access security program coordination, including production access controls, non-human identity, or similar IAM-adjacent initiatives.\nExperience coordinating security review and operations programs - design/architecture reviews, AI security reviews, red team vendor engagement, and security champions.\nTrack record delivering executive quarterly program reviews, procurement decision packages, and semi-automated metrics reporting (aging, throughput, SLA adherence) for security or engineering programs.\nSaaS or enterprise product security experience in audit- or compliance-sensitive environments, with d...","description_format":"text","description_chars":16362,"description_truncated":true,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":["Equity","Flexible vacation policy","Life insurance","Parental leave","Vision insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Identity Management"],"lifecycle":[{"event":"open","at":"2026-07-31T00:00:00Z"},{"event":"close","at":"2026-10-19T08:48:21Z"},{"event":"reopen","at":"2026-11-03T23:36:16Z"},{"event":"close","at":"2026-11-04T22:25:22Z"},{"event":"reopen","at":"2026-11-11T20:55:48Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 36 · green card filings: 5","filings_12m":36,"filings_prev_12m":39,"green_card_filings_12m":5,"median_offered_wage_usd":153720,"route":null,"cap_exempt":false,"checked_at":"2026-11-12T07:36:15+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":10}],"liveness":{"score":8,"band":"cold","label":"Long shot","p_open":1,"p_active":0.3,"p_room":0.28,"age_days":104,"expected_fill_days":32,"reasons":["conf:7","repost:2","stale_co","velocity","ghost","win:tail","crowd:"],"computed_at":"2026-11-12T10:38:37Z"},"pay":null,"html_url":"https://alion.io/job/sailpoint-senior-technical-program-manager-security","json_url":"https://alion.io/job/sailpoint-senior-technical-program-manager-security.json","meta":{"generated_at":"2026-11-13T06:40:46Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14014,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4926},"rest":"https://alion.io/mcp/rest/get_company?id=4926"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsailpoint-senior-technical-program-manager-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsailpoint-senior-technical-program-manager-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsailpoint-senior-technical-program-manager-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sailpoint-senior-technical-program-manager-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsailpoint-senior-technical-program-manager-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":111874}},{"tool":"search_jobs","arguments":{"company":"sailpoint.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":111874},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}