Skip to content

Security Software Engineer, IAM

  1. Careers /
  2. Security & IT
  • Security & IT
  • United States
  • Full Time

About Vercel:

Vercel is the agentic infrastructure company, freeing people and agents to ship what's next. For more than a decade we've helped builders move from idea to production with speed, security, and exceptional developer experience.

Now we're scaling our products for both agents and people to ship and run software, built in the open and trusted by OpenAI, PayPal, Ramp, Supreme, and millions of developers worldwide.

About the role:

We are looking for a Security Software Engineer, IAM, to build identity and access management (IAM) infrastructure as software, not administer identity products, and we want a software engineer who has gone deep on identity or an IAM engineer with a strong engineering background. You will replace the approval queue with access that is self-serve, time-bound, and provable, built so identity is defined as code, reviewed in pull requests, deployed through CI, and observable in production, and you will help decide how agents act on behalf of users and systems. This is a hybrid role based in San Francisco or New York City, with three days a week in the office.

What you’ll do:

  • Migrate Okta and related IAM configuration to Terraform so every identity change is reviewed, tested, and versioned, and help engineering teams adopt infrastructure as code

  • Build a self-serve access platform, including JIT access, that lets team and system owners define, request, and time-bound their own access

  • Own provisioning, deprovisioning, and access review workflows that generate System and Organization Controls 2 (SOC 2) audit evidence automatically

  • Unify corporate IAM (employee identity, SaaS access, devices) and production IAM (service accounts, infrastructure permissions, on-call access) into one identity plane, and enforce least-privilege access across cloud, SaaS, and production infrastructure

  • Define and build how agents request and hold access, working with the Accounts team on product-facing identity

What you need:

  • 7+ years in identity, access management, or platform security engineering, including IAM design across corporate (Okta or equivalent) and production (AWS or GCP) environments

  • Built and operated production services or self-service platforms in TypeScript/Node.js, Go, or Python, including REST APIs

  • Implemented OAuth2, OpenID Connect (OIDC), Security Assertion Markup Language (SAML), and System for Cross-domain Identity Management (SCIM) at the protocol level, including failure modes such as token replay and sync drift

  • Managed IAM infrastructure as code in Terraform

Bonus if you:

  • Led a Terraform migration for IAM or identity infrastructure at scale

  • Designed or built a JIT access system or access governance platform

  • Designed delegation or scoped-credential models for agents or service identities

Compensation & Benefits:

  • Competitive compensation package, including equity.

  • Inclusive Healthcare Package.

  • Learn and Grow - we provide mentorship and send you to events that help you build your network and skills.

  • Flexible Time Off.

  • We will provide you the gear you need to do your role, and a WFH budget for you to outfit your space as needed.

The San Francisco, CA base pay range for this role is $208,000 - $312,000. Actual salary will be based on job-related skills, experience, and location. Compensation outside of San Francisco may be adjusted based on employee location. The total compensation package may include benefits, equity-based compensation, and eligibility for a company bonus or variable pay program depending on the role. Your recruiter can share more details during the hiring process. 

Disclosures:

  • Privacy: Please review our Job Applicant Privacy Policy for more information on how we handle your data.

  • Equal Opportunity: Vercel is committed to fostering and empowering an inclusive community within our organization. We do not discriminate on the basis of race, religion, color, gender expression or identity, sexual orientation, national origin, citizenship, age, marital status, veteran status, disability status, or any other characteristic protected by law. Vercel encourages everyone to apply for our available positions, even if they don't necessarily check every box on the job description.

Apply Now.

Tell us why you’d be a good fit for the Security Software Engineer, IAM role.

Resume should be a PDF under 3.5MB.

Will you require Visa Sponsorship now, or in the future?

Your authorization to work in the country where you live. Please choose the option that describes your work authorization.

Are you currently based in any of these countries? Please note these are the only countries where we are accepting applications

Do you live in one of the following states? Alabama, Alaska, Delaware, Kansas, Maine, Mississippi, Montana, Nebraska, New Mexico, North Dakota, South Dakota, West Virginia, or Wyoming.

Where did you first hear about this role?

By submitting my application, I acknowledge that I have read and understand Vercel’s Job Applicant Privacy Notice

Please double-check all the information provided above. Ensuring accuracy is crucial, as any errors or omissions may impact the review of your application.

U.S. Standard Demographic Questions.

At Vercel, we value belonging and believe in fostering an environment where a diversity of perspectives can thrive. As part of this commitment, we invite you to voluntarily provide demographic information. Your responses will be used (in aggregate only) to help us better understand the diversity of our applicants and identify areas of improvement in our recruitment and hiring process. Your responses, or decision not to respond, will be kept confidential and will only be used in aggregate form for diversity and inclusion efforts. This information will not be associated with your specific application and will not be disclosed to the hiring team or used in the hiring decision in any way.

Individuals seeking employment are considered without regard to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, or sexual orientation. Asking the below questions help us comply with federal and state Equal Employment Opportunity/Affirmative Action record keeping, reporting, and other legal requirements.

How would you describe your gender identity? (mark all that apply)

How would you describe your racial/ethnic background? (mark all that apply)

How would you describe your sexual orientation? (mark all that apply)

Do you identify as transgender?

Do you have a disability or chronic condition (physical, visual, auditory, cognitive, mental, emotional, or other) that substantially limits one or more of your major life activities, including mobility, communication (seeing, hearing, speaking), and learning?

Are you a veteran or active member of the United States Armed Forces?

Optionally, include links to your social media profiles.