Sr. Product Manager - Falcon Privileged Access (Hybrid)

As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. We work on large scale distributed systems, processing almost 3 trillion events per day and this traffic is growing daily. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We're proud to work for a mission-driven company leveraging AI to transform the way we work. CrowdStrikers drive their careers through flexibility and autonomy while also being expected to contribute to a culture of responsible AI adoption, experimentation, and innovation. We use an AI-first mindset as a force multiplier to proactively and continuously accelerate execution, build expertise, uncover insights, and solve complex problems. We’re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you. About the Role: Privileged access delivers the keys to the kingdom and must be protected. Adversaries don't need to break through a firewall when they can hijack an administrative account, extract a hardcoded secret, or ride an active privileged session. Traditional Privileged Access Management (PAM) solutions rely on heavy, friction-filled processes that vault shared credentials and leave gaps in modern, dynamic environments. Enterprises are modernizing their identity management services, moving beyond traditional PAM and vaults, to just-it-time, continuous identity solutions that enforce contextual policies to deliver access only when appropriate, not before or after. This role owns CrowdStrike Falcon Privileged Access, focusing on eliminating standing privileges and shrinking the attack surface without hindering productivity. You will define the future of how we enforce Just-In-Time (JIT) access, secure secrets, broker isolated administrative sessions, and integrate privileged context directly with our endpoint and cloud telemetry. It's an area with significant scope for a Sr. Product Manager to disrupt legacy approaches and define a frictionless, AI-native PAM strategy. This is a hybrid position requiring at least 2 days a week in the office at our NYC, Boston, Arlington or Toronto, Canada office locations. What You'll Do: Own the transition to continuous identity and modern PAM: Define the product strategy to deliver market leading, modern privileged access and zero standing privileges across endpoints, infrastructure, and cloud environments. Deliver best-in-class user experiences for privilege elevation: Work with Product Designers to deliver multi-channel user experiences that provide end users and administrators experiences that are in the flow of work, easy to use and ideally completely transparent, operating in the background. Leverage the power of the CrowdStrike Falcon platform: Every privileged management decision is better when informed by contextual security and business data about the user, their device, and the target resource. You'll work across product teams to deliver privileged access that leverages the rich security data, threat analysis, security controls, process automation and AI capabilities of the Falcon platform Be the expert: Serve as the expert for Falcon Privileged Access to all internal and external parties. You will deliver core messaging, enablement materials, demos, and FAQs. You will also engage directly with internal teams, prospects and current customers to gather requirements, answer questions and convey our product vision and roadmap. Use AI agents as a core part of how you work: Research, analysis, spec iteration, and customer synthesis should run through agentic tooling as a default, not an occasional experiment. What You'll Need: Privileged Access and Identity Depth: Hands-on background in Privileged Access Management, secrets management, identity governance, or a closely adjacent technical domain. You know the friction points of legacy vendors (e.g., CyberArk, BeyondTrust, Delinea, HashiCorp) because you’ve worked with their products and their customers. Real understanding of how privilege elevation works across endpoint, applications, infrastructure and cloud; and the difference between assigned administrative roles and effective privileged access. Direct product experience with delivering just-in-time access through policy-driven provisioning operations that leverage direct connectors, claim-based authorization, and integrations with third party solutions. Real understanding of non-human identity (NHI): service accounts, workload identity, machine credentials, AI agents and secrets rotation. You know why securing machine-to-machine privilege is fundamentally different from human PAM. Fluency with core administrative protocols (SSH, RDP, Kerberos, LAPS) and where legacy vaulting and brokering architectures create operational bottlenecks or exploitable risk. Fluency with core identity providers (Entra ID, Okta, Ping, and similar) and identity protocols (oAuth, OIDC, SAML) and how they can be leveraged to deliver authentication, MFA and claims-based authorization. Product Management and Communication: 5+ years in product management, with proven experience bringing products from 0 to 1 and scaling them once shipped. Comfortable driving ambiguous areas from problem definition to delivered product, without waiting for the spec to be handed to you. AI agents are a core part of how you work today: research, analysis, spec iteration, customer synthesis, stakeholder prep. You have formed specific opinions about which models, tools, and patterns work for PM work and which don't. Strong instinct for simplification: you've taken something genuinely complex (a privileged access workflow, a session brokering architecture, a JIT approval matrix) and made it usable by someone who doesn't live in it every day. Able to mock and iterate on ideas rapidly using Claude Code, Lovable, Replit, or similar tools before anything touches design or engineering. When you come to a product discussion, you bring a working prototype or a concrete visual. Bring examples that show you've done this. Able to explain a complex privileged risk concept in plain language to whoever is in front of you, whether that's an engineer, an executive, or a customer's audit team. Strong written communication across whatever format the work calls for: a spec, a prompt chain, an eval, a one-pager, a working prototype. Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes. Bonus Points: Prior experience with and broad knowledge of related Identity Management areas (SSO, MFA, IGA, SAML, OAuth, ITDR, ISPM, etc.) Prior experience successfully migrating customers off legacy PAM solutions. Prior work at a CrowdStrike partner, competitor, or large enterprise security team. Experience treating compliance and audit requirements (e.g., SOC2, PCI-DSS privileged access controls) as a product design constraint rather than a legal review step. Prior work in adversarial thinking, red-teaming, or threat modeling. #LI-IL1 #LI-DG1 Benefits of Working at CrowdStrike: Market leader in compensation and equity awards Comprehensive physical and mental wellness programs Competitive vacation and holidays for recharge Paid parental and adoption leaves Professional development opportunities for all employees regardless of level or role Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections Vibrant office culture with world class amenities Great Place to Work Certified™ acros