About the company
Strava is the app for active people. With over 200 million athletes in more than 185 countries, it’s more than tracking workouts—it’s where people make progress together, from new habits to new personal bests. No matter your sport or how you track it, Strava’s got you covered. Find your crew, crush your goals, and make every effort count. Start your journey with Strava today. Our mission is simple: to motivate people to live their best active lives. We believe in the power of movement to connect and drive people forward.
Responsibilities
Identity:
- Own the product roadmap for Strava's identity platform — sign-up, login, password management, MFA, and account recovery — with a unified experience across iOS, Android, and web
- Lead the launch of a single, unified identity service across the Strava Group
- Own authorization and access-control systems (role- and attribute-based) balancing usability with security and compliance
- Extend login and account recovery to modern standards: OAuth, SSO, biometric authentication, passkeys, OTP, phone-based recovery
- Partner closely with Engineering, Security, Legal, and Trust & Safety on session management, secure authentication, and abuse prevention
- Own key identity metrics: authentication success rates, account recovery completion, security incidents, user satisfaction
Privacy:
- Define and drive a proactive privacy roadmap
- Own the athlete-facing privacy experience: consent flows, data settings, deletion, and portability
- Partner with Legal to translate regulatory obligations (GDPR, CCPA, and emerging frameworks) into clear product decisions
- Define how and to whom athlete data is shared
- Represent privacy as a product principle in cross-functional conversations across the org
Requirements
- Identity product experience is a must-have: demonstrated ownership of authentication, authorization, or access-control product surfaces at a consumer app or platform
- Strong cross-functional partnership skills — especially with Engineering, Security, Legal, and Trust & Safety
- Good product judgment and comfort working with AI/ML-driven product decisions; experience using AI-forward development tools (e.g., Claude Code) to accelerate product work
- Data fluency — comfortable using Amplitude, SQL, or similar tools to measure authentication funnels, consent rates, and feature adoption
- Ability to translate technical and regulatory constraints into clear, user-facing product decisions
- Experience with privacy, consent, or data-controls features specifically (GDPR, CCPA, or global frameworks like LGPD, PIPL)
- Experience unifying identity or account systems across multiple products/brands
Conditions
- We follow a flexible hybrid model that translates to more than half of your time on-site in our San Francisco office — three days per week.
- For more information on benefits, please click here.