В Vercel это чётко очерченная senior-роль с заметной ответственностью за IAM и доступы для агентов, а также с обучением в современной продуктовой компании.
Кликните для подробной информации
Офис три дняЧёткая зона ответственностиСовременный стекПоддержка развития
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Security Software Engineer, IAM (Terraform/Okta): Building identity and access management infrastructure, self-service access platforms, and unified corporate and production identity systems with an accent on infrastructure as code, least-privilege access, and automated audit evidence. Focus on implementing JIT access, protocol-level OAuth2/OIDC/SAML/SCIM integrations, and designing scoped access for agents and service identities.
Location: Hybrid in San Francisco or New York City, with three days per week in the office.
Salary: $208,000–$312,000 annual base pay in San Francisco; compensation outside San Francisco may be adjusted based on employee location.
Company
Vercel provides agentic infrastructure and developer-focused products for shipping and running software.
What you will do
Migrate Okta and related IAM configuration to Terraform and help engineering teams adopt infrastructure as code.
Build a self-service access platform with just-in-time access, owner-defined requests, and time-bound permissions.
Own provisioning, deprovisioning, and access review workflows that automatically generate SOC 2 audit evidence.
Unify corporate and production IAM across employee identities, SaaS, devices, service accounts, infrastructure permissions, and on-call access.
Enforce least-privilege access across cloud, SaaS, and production infrastructure.
Define how agents request and hold access in collaboration with the Accounts team on product-facing identity.
Requirements
7+ years building and owning identity, access management, or platform security systems, including IAM design across corporate and production environments.
Experience with Okta or an equivalent corporate IAM platform and AWS or GCP production environments.
Experience building and operating production services or self-service platforms in TypeScript/Node.js, Go, or Python, including REST APIs.
Protocol-level implementation of OAuth2, OpenID Connect, SAML, and SCIM, including token replay and sync drift failure modes.
Experience managing IAM infrastructure as code in Terraform.
Nice to have
Led a Terraform migration for IAM or identity infrastructure at scale.
Designed or built a JIT access system or access governance platform.
Designed delegation or scoped-credential models for agents or service identities.
Culture & Benefits
Hybrid work with three required office days per week in San Francisco or New York City.
Competitive compensation package that may include equity and a company bonus or variable pay program.
Inclusive healthcare package and flexible time off.
Mentorship, learning opportunities, and support for attending professional events.
Company-provided equipment and a work-from-home budget.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →