Engineering Manager - Identity & Access Management

The mission of The New York Times is to seek the truth and help people understand the world. That means independent journalism is at the heart of all we do as a company. It’s why we have a world-renowned newsroom that sends journalists to report on the ground from nearly 160 countries. It’s why we focus deeply on how our readers will experience our journalism, from print to audio to a world-class digital and app destination. And it’s why our business strategy centers on making journalism so good that it’s worth paying for. 

About the Role:

The New York Times is seeking a hands-on technical leader who will build and lead the team responsible for identity platforms and access orchestration across the enterprise. This role and team sit within the Cybersecurity Department, but their mandate covers the entire NYT organization.

In this role, you will own complex initiatives end‑to‑end, shape the long-term identity roadmap, and ensure that our identity and access controls are secure, strategic, and scalable. You will partner closely with teams across the Cybersecurity and Technology departments to drive strategic work across our core platforms, with a focus on automation, lifecycle workflows, and access governance. This is a people‑manager role with significant technical depth: you will coach and grow engineers while remaining close enough to the work to guide architecture and technical implementation.

Cybersecurity helps prevent The Times from becoming news. Our mission is to protect staff, subscribers, sources, and the intellectual property of The New York Times and its subsidiaries from unauthorized access, damage, and disclosure.

Responsibilities:

• Own the strategic direction and multi-year roadmap for enterprise Identity and Access Management initiatives, taking into account departmental and company objectives.
• Lead the execution of a Group Lifecycle Management strategy by leveraging a new Identity Governance and Administration layer, and help operationalize this strategy across relevant systems.
• Work with product and platform teams to model roles and access profiles that balance security and productivity.
• Partner with Enterprise Technology and Developer Platforms to implement and operate identity orchestration for provisioning, deprovisioning, and access reviews across key systems.
• Define and implement patterns for privileged access management and just‑in‑time elevation, especially for cloud and production roles.
• Be a thought leader for Identity in cross-functional initiatives like conditional access which impact thousands of NYT employees.
• Demonstrate support and understanding of our value of journalistic independence and a strong commitment to our mission to seek the truth and help people understand the world.
• You will report to the Senior Director, Cybersecurity.

Basic Qualifications:

• 8+ years of experience in software engineering, security engineering, or identity engineering, with 3+ years in a technical leadership or engineering management role (formal people management or tech‑lead experience)
• Experience designing and operating identity systems or platforms at scale, such as:
  • Entra/Azure AD and/or Active Directory
  • SSO and federation (OIDC/SAML)
  • SCIM‑based provisioning and group lifecycle management
  • Identity governance / access orchestration platforms (e.g., ConductorOne, SailPoint, Entra ID Governance, or similar)
• Strong understanding of security controls across multiple domains, including access management, authentication/authorization, privileged access, and endpoint/device posture
• Hands‑on familiarity with cloud platforms (AWS and/or GCP) and best practices for securing identity and access in those environments
• Working knowledge of engineering practices (CI/CD, GitOps, IaC) and how identity and access controls integrate into those workflows
• Familiarity with ConductorOne or similar identity orchestration platforms and experience implementing them

Preferred Qualifications:

• Experience leading or implementing:
  • Identity governance and administration (IGA) rollouts
  • Conditional access and device trust strategies (e.g., hardware MFA, high‑risk user/location controls)
• Experience with Terraform or similar IaC tools to manage Entra/AD, cloud IAM, and/or Google Org configuration

This role may require limited on-call hours. An on-call schedule will be determined when you join, taking into account team size and other variables.

#LI-Hybrid

REQ-020028

The annual base pay range for this role is between:$165,000—$180,000 USD

For roles in the U.S., dependent on your role, you may be eligible for variable pay, such as an annual bonus and restricted stock. Benefits may include medical, dental and vision benefits, Flexible Spending Accounts (F.S.A.s), a company-matching 401(k) plan, paid vacation, paid sick days, paid parental leave, tuition reimbursement and professional development programs. 

For roles outside of the U.S., information on benefits will be provided during the interview process.

The New York Times Company is committed to being the world’s best source of independent, reliable and quality journalism. To do so, we embrace a diverse workforce that has a broad range of backgrounds and experiences across our ranks, at all levels of the organization. We encourage people from all  backgrounds to apply.

We are  an Equal Opportunity Employer and do not discriminate on the basis of an individual's sex, age, race, color, creed, national origin, alienage, religion, marital status, pregnancy, sexual orientation or affectional preference, gender identity and expression, disability, genetic trait or predisposition, carrier status, citizenship, veteran or military status and other personal characteristics protected by law. All applications will receive consideration for employment without regard to legally protected characteristics.  The U.S. Equal Employment Opportunity Commission (EEOC)’s Know Your Rights Poster is available here. 

The New York Times Company will provide reasonable accommodations as required by applicable federal, state, and/or local laws. Individuals seeking an accommodation for the application or interview process should email reasonable.accommodations@nytimes.com. Emails sent for unrelated issues, such as following up on an application, will not receive a response.

The Company encourages those with criminal histories to apply, and will consider their applications in a manner consistent with applicable "Fair Chance" laws, including but not limited to the NYC Fair Chance Act, the Los Angeles Fair Chance Initiative for Hiring Ordinance, the San Francisco Fair Chance Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act.

For information about The New York Times' privacy practices for job applicants click here.

Please beware of fraudulent job postings. Scammers may post fraudulent job opportunities, and they may even make fraudulent employment offers. This is done by bad actors to collect personal information and money from victims. All legitimate job opportunities from The New York Times will be accessible through The New York Times careers site. The New York Times will not ask job applicants for financial information or for payment, and will not refer you to a third party to do so. You should never send money to anyone who suggests they can provide employment with The New York Times.

If you see a fake or fraudulent job posting, or if you suspect you have received a fraudulent offer, you can report it to The New York Times at NYTapplicants@nytimes.com. You can also file a report with the Federal Trade Commission or your state attorney general.