Staff Product Manager, Identity & Access Management

Want to help us help others? We’re hiring! GoFundMe is the world’s most powerful community for good, dedicated to helping people help each other. By uniting individuals and nonprofits in one place, GoFundMe makes it easy and safe for people to ask for help and support causes—for themselves and each other. Together, our community has raised more than $40 billion since 2010. About the Role We are hiring a Staff Product Manager to build and scale GoFundMe’s Identity and Access Management platform. This role is focused on secure and low-friction login, verification, session security, account recovery, and the practical authorization needs that come with operating a trusted platform. AI proficiency is a core expectation for this role. We want someone who is comfortable using AI day to day to move faster and who can also take an AI- and machine-learning-driven approach to account protection and operational workflows where it makes sense. The bar is building systems that are accurate, measurable, and trustworthy. We need a builder. Someone who has shipped identity systems in production and can do 0 to 1 and 1 to 100 work. This is not a role for someone whose main experience is maintaining a mature stack with incremental roadmap updates. Candidates considered for this role will be located in the San Francisco, Bay Area. There will be an in-office requirement of 3x a week. The Job Own the strategy and execution for identity and account access across login, MFA, passkeys/WebAuthn, session management, and account recovery Drive measurable improvements across security and user outcomes, including login success, recovery success, conversion, ATO reduction, and reliability Lead 0 to 1 builds and 1 to 100 rollouts, including migrations from legacy flows with strong launch discipline, monitoring, and rollback plans Partner deeply with Engineering and Security on threat modeling and abuse cases, including recovery abuse, then turn those learnings into product and platform changes Build platform primitives, APIs, and shared components that other teams adopt, and drive adoption through documentation and enablement Own key authorization surfaces that matter to the platform today, such as admin access controls, roles, and permissions for internal tools, and auditing Make build vs buy decisions and lead vendor evaluations and integrations when needed, with a clear view of long-term operability and risk You Hands-on identity depth Proven experience shipping identity and access systems end-to-end in production, with clear decision ownership Strong familiarity with modern authentication patterns, including MFA, passkeys/WebAuthn, session security, and account recovery design Working knowledge of OAuth 2.0 and OIDC. Familiarity with SSO and SAML is a plus Builder mindset and execution Strong examples of building from scratch and then scaling, with real rollout discipline and measurable outcomes Strong judgment balancing security, user experience, and operational risk Comfortable in technical conversations and able to explain tradeoffs clearly to non-technical stakeholders Leadership behaviors High autonomy: you find problems and opportunities, form a point of view, and drive execution without waiting for perfect inputs or top-down direction Strong cross-functional leadership with Engineering, Security, Data, and other product teams AI proficiency (core) Uses AI tools in daily work to move faster and produce higher quality outputs (analysis, synthesis, PRDs/RFCs, experiment plans, incident or launch retros) Experience partnering with data science or ML engineers to ship model-driven or AI-assisted capabilities, with clear success metrics and monitoring Strong instincts around responsible use in a security-sensitive domain: quality, failure modes, guardrails, privacy and data handling, and human review where required Preferred Experience with ATO investigations, fraud defenses, and incident response Prior experience as a software engineer, especially in