Назад
7 дней назад

Security Software Engineer, IAM

208 000 - 312 000$
Формат работы
hybrid
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Security Software Engineer, IAM (Terraform/Okta): Building identity and access management infrastructure, self-service access platforms, and unified corporate and production identity systems with an accent on infrastructure as code, least-privilege access, and automated audit evidence. Focus on implementing JIT access, protocol-level OAuth2/OIDC/SAML/SCIM integrations, and designing scoped access for agents and service identities.

Location: Hybrid in San Francisco or New York City, with three days per week in the office.

Salary: $208,000–$312,000 annual base pay in San Francisco; compensation outside San Francisco may be adjusted based on employee location.

Company

Vercel provides agentic infrastructure and developer-focused products for shipping and running software.

What you will do

  • Migrate Okta and related IAM configuration to Terraform and help engineering teams adopt infrastructure as code.
  • Build a self-service access platform with just-in-time access, owner-defined requests, and time-bound permissions.
  • Own provisioning, deprovisioning, and access review workflows that automatically generate SOC 2 audit evidence.
  • Unify corporate and production IAM across employee identities, SaaS, devices, service accounts, infrastructure permissions, and on-call access.
  • Enforce least-privilege access across cloud, SaaS, and production infrastructure.
  • Define how agents request and hold access in collaboration with the Accounts team on product-facing identity.

Requirements

  • 7+ years building and owning identity, access management, or platform security systems, including IAM design across corporate and production environments.
  • Experience with Okta or an equivalent corporate IAM platform and AWS or GCP production environments.
  • Experience building and operating production services or self-service platforms in TypeScript/Node.js, Go, or Python, including REST APIs.
  • Protocol-level implementation of OAuth2, OpenID Connect, SAML, and SCIM, including token replay and sync drift failure modes.
  • Experience managing IAM infrastructure as code in Terraform.

Nice to have

  • Led a Terraform migration for IAM or identity infrastructure at scale.
  • Designed or built a JIT access system or access governance platform.
  • Designed delegation or scoped-credential models for agents or service identities.

Culture & Benefits

  • Hybrid work with three required office days per week in San Francisco or New York City.
  • Competitive compensation package that may include equity and a company bonus or variable pay program.
  • Inclusive healthcare package and flexible time off.
  • Mentorship, learning opportunities, and support for attending professional events.
  • Company-provided equipment and a work-from-home budget.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →