Director, Consumer Identity Technology

Job Summary

Required Qualifications

• •10+ years in software/platform engineering with progressive people leadership, including experience leading multiple teams or engineering PODs concurrently, ideally across a blended onshore/offshore organization
• •Direct, hands-on experience with consumer identity and access management (CIAM): identity servers, OIDC/OAuth2, SSO, JWT-based auth, and passwordless/passkey (FIDO2/WebAuthn) technologies
• •A track record owning a production identity or API platform at real scale — not just a feature team, but the operational and architectural discipline that comes with being the system everything else depends on
• •Genuine fluency with AI-assisted software development — someone who wants their team building with AI tooling as a core practice, not just talking about it
• •Experience making vendor and architecture decisions under real-world constraints, in a highly regulated, high-trust environment (healthcare, fintech, or similar)
• •A frontier mindset: someone who's genuinely excited about where authentication and identity trust are headed, and wants to help define it — not just maintain what's already been built
• •Must be able to lead two identity engineering PODs plus a global (onshore and offshore) support function operating around the clock
• •Must be able to build and grow a blended team of full-time engineers and delivery partners, with a clear strategy for where to build in-house capability over time
• •Must be able to identify and develop your strongest engineers into bigger roles as the team's scope grows
• •Must be able to own key identity and authentication vendor relationships, and bring a clear point of view on build-vs-buy as the CIAM and IDV vendor landscape evolves
• •Must be able to represent identity engineering in cross-functional planning with fraud, product security, member services, and mobile/UX — translating business priorities into a resourced, defensible plan
• •Must be able to own the platform's next architectural chapter: identity server/CIAM strategy, and resiliency planning for the third-party dependencies the platform relies on
• •Must be able to own delivery of the identity platform's roadmap — unifying the team's remaining login experiences into one, extending secure self-service account recovery across web and mobile, and bringing verified identity to members who don't yet have an account
• •Must be able to keep the systems members already trust running flawlessly: production reliability, monitoring, and continuous hardening of the identity platform at scale
• •Must be able to go beyond passwordless — explore and prototype what's next in phishing-resistant, low-friction authentication, and make the case for where the platform should go
• •Must be able to build with AI-native engineering practices as a first-class part of how the team designs, ships, and tests — not a side experiment, but how the team moves faster than a traditional identity org can
• •Must be able to lead a large, distributed engineering organization
• •Must be able to participate in Trailhead, HealthEquity's immersive onboarding experience Trailhead is designed to foster meaningful connections, support your integration into the organization, and equip you with a strong understanding of our business
• •Must be able to participate in a mandatory onsite Trailhead session at a later date
• •Must be able to consent to Microsoft Copilot's AI technology recording and transcribing your interview with your Talent Partner
• •Must be able to participate in live interviews and complete any assessments without AI assistance unless instructions explicitly indicate otherwise or a specific exception is discussed and approved in advance

Desired Qualifications

• •ideally across a blended onshore/offshore organization