产品经理,身份与访问管理
Product Manager, Identity & Access Management
我们是谁
关于 Stripe
Stripe 是一家面向企业的金融基础设施平台。数以百万计的公司——从全球最大的企业到最具雄心的初创公司——使用 Stripe 来接受支付、增长收入并加速新的商业机会。我们的使命是提升互联网的 GDP,而我们面前还有大量工作要做。这意味着你有机会在职业生涯中做最重要的工作,同时让全球经济触手可及。
关于团队
IAM 是 Stripe 的神经中枢。我们控制数百万家企业如何授予其账户访问权限,包括员工、AI 代理、应用程序和 API 集成,覆盖仪表板、API、CLI 和 MCP。我们也是一个平台团队,构建每个 Stripe 产品都依赖的统一、细粒度权限模型。
AI 代理正在改变企业运营的方式,以及它们如何被授权、治理和保障安全,而这正由我们来定义。我们正在解决真实企业面临的挑战性且未解决的问题,例如当代理模糊了代表人类行动与独立主体之间的界限时,如何建模代理,或者如何授权整个代理工作流,而不是逐步操作。我们直接与前沿 AI 实验室合作,推动 MCP 的演进、新的身份协议和代理集成。我们为个人创始人和财富 500 强企业打造产品,而这两者之间的张力正是真正的产品工作所在。
你会做什么
你将设定愿景并推动所有主体(人类、代理或应用)如何访问 Stripe 账户的路线图。你将通过直接与使用该系统的创始人、管理员和开发者交流来实现这一目标。
- 设计所有场景下的访问授权体验。注册、邀请同事、创建 API 密钥、授权代理或第三方应用。
- 特别设计代理的体验。将代理作为 Stripe 中的新主体进行设计,包括它们如何进行身份验证、可以执行哪些操作,以及企业如何保持控制权,包括对涉及真实资金的操作进行审批和人工介入检查点。你将定义一个将树立行业标准的体验。
- 推动最小权限原则,使其变得简单。全面负责 Stripe 内部,确保每个用户、应用和代理仅拥有其所需的权限。基于真实的 API 使用情况,构建自定义角色、智能权限默认值和权限建议,使权限管理变得简单。
查看英文原文
Who we are
About Stripe
Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world’s largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone’s reach while doing the most important work of your career.
About the team
IAM is the nerve center of Stripe. We control how millions of businesses grant access to their account, including employees, AI agents, apps, and API integrations, across the Dashboard, API, CLI, and MCP. We're also a platform team, building the unified, fine-grained permissions model that every product at Stripe builds on.
AI agents are changing how businesses operate, and how they get authorized, governed, and secured is being defined right now—largely by us. We’re tackling challenging and unsolved problems for real businesses, like how to model agents when they blur the line between acting on behalf of a human vs. standalone principals, or how to authorize entire agent workflows rather than step-by-step actions. We’re collaborating directly with the frontier AI labs on the evolution of MCP, new identity protocols, and agent integrations. We build for solo founders and Fortune 500s alike, and the tension between those two is where the real product work lives.
What you’ll do
You'll set the vision and drive the roadmap for how every principal, human, agent, or app, gets access to a Stripe account. You'll do it by talking directly to the founders, admins, and developers who use it.
- Design the experience of granting access, everywhere. Signing up, inviting a teammate, creating an API key, authorizing an agent or a third-party app.
- Design for agents specifically. Design for agents as a new principal within Stripe, including how they authenticate, what they're allowed to do, and how businesses stay in control, including approvals and human-in-the-loop checkpoints for actions involving real money. You're defining an experience that will set the industry standard.
- Drive least privilege, made easy. Take holistic ownership across Stripe to ensure that every user, app and agent has only the permissions it requires. Build custom roles, smart permission defaults, and permission recommendations based on real API usage to make least-privilege authorization easy rather than tedious.
- Push toward a world without secrets. Make secretless authentication (Workload Identity Federation) the default way developers integrate with Stripe to prevent emerging security threats from increasingly sophisticated and AI-powered attackers.
- Partner across all of Stripe. Pitch an ambitious vision, then get teams across Dashboard, API Platform, Security, Payments and Money Movement genuinely excited to build it with you.
Who you are
The hardest part of this job, and the most fun, is the constant trade-off: usability vs. security, flexibility vs. simplicity. It takes taste to find a shape that feels effortless for a solo founder and holds up at Fortune 500 scale.
Minimum requirements
- 5+ years in PM, shipping platform or infrastructure products that other teams build on
- Background in security, identity, auth, or developer platforms, or serious curiosity about the space
- A habit of talking to users to find the real problem, not the reported one
- Technical fluency to go deep with engineers on authorization and authentication design
- A bias toward experimentation over big-bang launches
- Comfort setting direction in a space that's still being invented, across teams you don't manage