Product Manager, Codex Security Controls & Partner Interfaces

OpenAI, Inc.

Job Overview

Location

Remote - US

Job Type

Full-time

Full Job Description

📋 Description

• Build native security controls for Codex, including identity, permissions, and tenant isolation.
• Partner with engineering, design, security, and safety teams to develop controls for access to repositories, files, tools, MCP servers, secrets, networks, and infrastructure.
• Help establish a graduated authority model in which local, read-only, and reversible actions require less friction than actions involving production systems, credentials, sensitive data, or irreversible changes.
• Define partner interfaces that allow customer-selected security products to participate in Codex workflows.
• Develop common, versioned interfaces that support sharing trusted identity, task, resource, and environment context, inspecting code, commands, artifacts, tool calls, or planned actions, returning allow, deny, constrain, or require-approval decisions, exporting normalized execution and security telemetry, pausing activity, revoking access, or requiring reauthorization.
• Ensure integrations use shared platform contracts rather than creating a different Codex architecture for every partner.
• Build the partner ecosystem by working directly with security vendors and enterprise design partners to turn the interfaces into production integrations.
• Create partner SDKs, reference implementations, technical documentation, test environments, conformance suites, and certification requirements.
• Prioritize partners based on customer value, technical relevance, deployment readiness, and their ability to improve the shared platform—not simply logo value or launch timing.
• Turn lessons from individual partner engagements into reusable product capabilities.
• Shape the customer experience by defining how enterprise administrators configure and understand Codex security controls, including policies by user, workspace, repository, environment, tool, or action, approved security providers and permitted data sharing, approval requirements and time-limited exceptions, policy inheritance and conflict resolution, audit, investigation, and incident-response workflows.
• Ensure developers receive clear, actionable explanations when an action is blocked or requires approval, rather than an opaque policy error.
• Establish evaluation and launch gates by working with security, safety, research, and engineering teams to test whether controls work under realistic and adversarial conditions.
• Evaluate risks such as permission bypass, prompt injection, malicious tools, secret exposure, cross-tenant access, stale authorization, partner outages, conflicting decisions, and incomplete audit evidence.
• Help determine when new Codex capabilities have sufficient controls, reliability, and usability for broader deployment.

🎯 Requirements

• Have built enterprise security, developer-platform, infrastructure, or control-plane products.
• Understand identity, authorization, sandboxing, secrets, tool use, APIs, and audit systems.
• Think naturally in terms of trust boundaries, failure modes, and abuse paths.
• Can balance security, developer productivity, latency, reliability, and customer control.
• Have experience building integrations across complex enterprise systems or partner ecosystems.
• Can turn conflicting partner requirements into a coherent platform.
• Communicate credibly with developers, security architects, CISOs, researchers, and partner product teams.

🏖️ Benefits

• Competitive salary and benefits package.
• Opportunity to work with a cutting-edge AI company.
• Collaborative and dynamic work environment.
• Professional development opportunities.
• Flexible work arrangements.

Skills & Technologies

OAuth

Product Management

Remote

Ready to Apply?

Apply Externally

You will be redirected to an external site to apply.

AI Job Fit Analysis

Pro

See exactly how your profile matches this role — strengths, skill gaps, and what to do about them.

OpenAI, Inc.

Visit Website

About OpenAI, Inc.

OpenAI is a San Francisco-based artificial intelligence research and deployment company founded in 2015. It develops large-scale AI models such as GPT, DALL-E, and Codex, providing cloud APIs and consumer applications like ChatGPT. Originally established as a non-profit, it later created a capped-profit subsidiary to attract capital while maintaining its mission to ensure artificial general intelligence benefits all of humanity.

View Company Profile

Get more remote jobs like this

Subscribe to the weekly newsletter for similar remote roles and curated hiring updates.

Weekly remote jobs and featured talent.

No spam. Only curated remote roles and product updates. You can unsubscribe anytime.