Security Software Engineer, IAM

The shape of it

In the posting’s own words

We are looking for a Security Software Engineer, IAM, to build identity and access management (IAM) infrastructure as software, not administer identity products, and this role suits a software engineer who has gone deep on identity or an IAM engineer with a strong engineering background. You will own identity and IAM end to end, replacing the approval queue with access that is self-serve, time-bound, and provable, built so identity is defined as code, reviewed in pull requests, deployed through CI, and observable in production, and you will help decide how agents act on behalf of users and systems. This is a hybrid role based in San Francisco or New York City, with three days a week in the office.

Also a plus

• Led a Terraform migration for IAM or identity infrastructure at scale
• Designed or built a JIT access system or access governance platform
• Designed delegation or scoped-credential models for agents or service identities

What the job covers

• Migrate Okta and related IAM configuration to Terraform so every identity change is reviewed, tested, and versioned, and help engineering teams adopt infrastructure as code
• Build a self-serve access platform, including just-in-time (JIT) access, that lets team and system owners define, request, and time-bound their own access
• Own provisioning, deprovisioning, and access review workflows that generate System and Organization Controls 2 (SOC 2) audit evidence automatically
• Unify corporate IAM (employee identity, SaaS access, devices) and production IAM (service accounts, infrastructure permissions, on-call access) into one identity plane, and enforce least-privilege access across cloud, SaaS, and production infrastructure
• Define and build how agents request and hold access, working with the Accounts team on product-facing identity

Tools and skills named

Words the posting leans on

• access13×
• identity13×
• iam10×
• infrastructure6×
• system6×
• production5×
• platform4×
• agents3×
• build3×
• built3×
• request3×
• security3×
• service3×
• status3×
• terraform3×
• access management2×

Counted from the posting after the mission statement and the legal notices are set aside. The ones near the top are the ones a screener is looking for.

More open at Vercel

• Account Executive, CommercialRemote - Germany
• Account Executive, MajorsHybrid - London
• Account Executive, Majors (APAC)Hybrid - Sydney
• Account Executive, Majors- Install Base (APAC)Hybrid - Sydney
• Account Executive-Startups, EMEA (French Speaker)Hybrid - London
• Account Executive- Startups, GreenfieldHybrid - San Francisco, New York City, Austin