Senior Director, Customer Identity and Access Management

Zillow

Confirmed live yesterday High trust
Remote

Quick summary

Work type
Remote
Location
Remote
Salary
$292,200–$466,800 / yr
Posted
8 days ago
Freshness
Confirmed live yesterday

Market check

Salary context

Above market

How this pay compares to similar roles

Similar $223k
This role $380k
$139k most similar roles pay here $502k

This role pays more than 98% of similar roles. Most pay $180,000–$266,437 — the shaded band above. At the midpoint, this role pays about $380k versus about $223k for comparable roles.

Based on 240 similar postings.

Employer

About Zillow

Zillow Group is a leading real estate and rental marketplace providing consumers with data, tools, and services to find, buy, sell, rent, and finance homes, and connecting buyers with agents and lenders. Industry: Real Estate Technology & Marketplace

Zillow currently has 23 open roles on FindRole.

Listed pay typically runs $148,600–$237,400 across 23 roles with salary data.

Most-posted roles

View all roles at Zillow

At a glance

TL;DR · Senior Director, Customer Identity and Access Management

Sr. Director, Customer Identity and Access Management leads a multi-team organization within Foundations Engineering to manage the authentication and authorization platform for high-traffic websites and associated brands. This leader oversees three engineering teams through managers while supporting Principal Engineers to drive technical strategy. The role involves building a centralized authentication platform using a commercial IdP, developing a fine-grained authorization service for high-volume policy evaluation, and establishing canonical customer identity services. Key responsibilities include setting multi-year roadmaps, managing budgets, and overseeing vendor relationships. Candidates must possess deep expertise in OAuth 2.0, OpenID Connect, SAML, and JWT, alongside experience with platforms like Auth0 or Okta. The work addresses the critical challenge of providing secure, scalable identity infrastructure that simplifies access for internal product teams while ensuring seamless user experiences across diverse digital interfaces and AI-driven interactions.

What you'll do

  • Develop and execute a multi-year technical roadmap for Zillow's customer identity, authentication, and authorization platforms.
  • Lead three engineering teams through managers to deliver high-quality, scalable infrastructure for the company's core products.
  • Consolidate authentication across all Zillow brands into a single, well-instrumented platform using an extended commercial Identity Provider.
  • Build and manage a fine-grained authorization service to replace fragmented, bespoke access logic with centralized policy evaluation.
  • Establish canonical source-of-truth services for customer data to eliminate duplicate information across the organization.
  • Manage the operational budget, vendor relationships, and tooling portfolio for the identity and access management domain.
  • Translate complex technical risks and architectural decisions into clear business impact for executive leadership.
  • Oversee system reliability, performance targets, and on-call practices for critical authentication infrastructure.

What we're looking for

  • 12+ years of high-volume engineering experience with at least 5 years leading through managers in a technology organization.
  • Deep knowledge of identity and access management concepts including MFA, conditional access, session management, and token management.
  • Strong working understanding of OAuth 2.0, OpenID Connect, SAML, and JWT protocols.
  • Hands-on experience with commercial IAM platforms such as Auth0, Okta, or Ping Identity.
  • Experience delivering platform capabilities consumed by multiple teams and driving the retirement of legacy systems.
  • Deep cloud experience (AWS, Google Cloud, Azure) with large-scale application architectures where performance and security are binding constraints.
  • Proficiency in at least one backend language such as Go, Java, or Python to review designs and code.
  • BS in Computer Science or a related technical field, or equivalent experience.
  • Experience building/operating fine-grained authorization systems (Zanzibar-style) at production scale (preferred).
  • Experience leading authentication migrations across multiple brands or legacy systems (preferred).
  • Background in high-volume B2C identity where conversion and friction are measured alongside security (preferred).
  • Familiarity with domain-driven design to establish canonical services in decentralized estates (preferred).

More like this

Similar roles

Director, Customer Identity & Access Management

Ally Financial

Charlotte, NC +3 17 days ago $125,000$190,000
CIAM IAM MFA OAuth 2.0 OpenID Connect FIDO2 Passkeys Biometrics API Jira Confluence Analytics Platforms Risk-based Authentication Identity Proofing KYC Fraud Prevention Cybersecurity
10+ yrs exp Hybrid

AI Identity and Access Management Consulting Director

CNA Financial

Chicago, IL 24 days ago $97,000$189,000
Okta SailPoint CyberArk AI GenAI Cloud IAM RBAC ABAC Automation Orchestration Security Architecture Identity Governance Provisioning Audit Compliance
10+ yrs exp Hybrid

Senior Identity & Access Management (IAM) Engineer

Allstate

Remote (IL) 22 days ago $98,100$167,850
Identity and Access Management (IAM) Single Sign-On (SSO) SAML OAuth OpenID Connect (OIDC) PingFederate Ping Access PingAM IBM Verify Identity Access IBM Verify Access IBM Security Access Manager (ISAM) Okta ForgeRock Python JavaScript Groovy YAML PowerShell Active Directory LDAP Agile Scrum MFA
5+ yrs exp Remote

Senior CIAM Software Engineer

Affirm

Remote 162 days ago $195,000$255,000
OAuth 2.0 OIDC SAML SCIM Python Kotlin AWS Terraform CI/CD Infrastructure as Code Okta Auth0 Ping Identity ForgeRock Azure AD B2C API Design Distributed Systems Buildkite GitHub
5+ yrs exp Remote

Staff CIAM Software Engineer

Affirm

Remote 37 days ago $230,000$290,000
Python Kotlin AWS Kubernetes MySQL Spark OAuth 2.0 OIDC SAML SCIM Terraform CI/CD Infrastructure as Code Okta Auth0 Ping Identity ForgeRock Azure AD B2C Buildkite GitHub
5+ yrs exp Remote