Remote opportunity at
VercelSecurity Software Engineer, IAM
Vercel is seeking a Security Software Engineer specializing in IAM to lead the end-to-end transformation of its identity infrastructure. The company builds agentic infrastructure that helps…
Career Tools
About This Role
Vercel is seeking a Security Software Engineer specializing in IAM to lead the end-to-end transformation of its identity infrastructure. The company builds agentic infrastructure that helps developers and agents deploy software swiftly and securely. This position moves away from traditional approval-queue identity management toward an automated, software-driven model. The role suits a software engineer with deep identity experience or an IAM engineer with a strong programming background who prefers building…
Job Description
Vercel is seeking a Security Software Engineer specializing in IAM to lead the end-to-end transformation of its identity infrastructure. The company builds agentic infrastructure that helps developers and agents deploy software swiftly and securely. This position moves away from traditional approval-queue identity management toward an automated, software-driven model.
The role suits a software engineer with deep identity experience or an IAM engineer with a strong programming background who prefers building scalable internal platforms over manual administration. Responsibilities include migrating Okta configurations entirely to Terraform, developing self-service and just-in-time access systems, and unifying corporate and production identity planes. You will collaborate closely with remote security leadership while having the option of in-office anchor days in San Francisco or New York if commuting.
Candidates should possess substantial hands-on experience in identity and access management, proficiency in production languages like TypeScript, Go, or Python, and expertise in infrastructure as code using Terraform. Vercel operates as an equal opportunity employer and encourages applicants to apply even if they do not meet every listed criteria.
Responsibilities
- Manage the complete IAM strategy spanning corporate, production, and product environments.
- Transition Okta and associated IAM setups into Terraform for version-controlled infrastructure as code.
- Create self-service governance tools and just-in-time access frameworks to eliminate security bottlenecks.
- Automate provisioning, deprovisioning, and access review workflows to streamline compliance and audits.
- Partner with the Accounts team to align internal identity systems with Vercel product roles, SSO, and API tokens.
- Establish least-privilege security controls across cloud, SaaS, and production assets.
- Contribute to the architecture and implementation of identity models for AI agents.
Requirements
- Minimum of seven years working in platform security engineering, access management, or identity.
- Demonstrated history of constructing internal tools or self-service platforms rather than purely administering them.
- Working fluency in a production programming language such as Python, Go, or TypeScript/Node.js.
- Strong proficiency with Terraform and managing identity infrastructure as code.
- Implementation-level knowledge of identity protocols including SAML, OIDC, OAuth2, and SCIM.
- Experience designing scalable IAM architectures across both corporate environments like Okta and production platforms like AWS or GCP.
Qualifications
- Led large-scale Terraform migrations for identity infrastructure.
- Designed or constructed just-in-time access systems or access governance platforms previously.
- Built or administered device-trust and MDM/MAM solutions such as Intune or Jamf.
- Familiarity with Vercel product IAM functionalities including enterprise SSO and API tokens.
- Formulated viewpoints regarding agent identity, delegation, and scoped credentials.
- Prior background working within SaaS, developer tools, or infrastructure sectors.
- Certifications such as CISSP, AWS Security Specialty, or Okta Certified Professional/Administrator.
Core Skills
Benefits
- Competitive compensation package including equity.
- Inclusive healthcare package.
- Learning and growth provisions including mentorship and event attendance funding.
- Flexible time off.
- Work gear and a work-from-home budget to set up your workspace.
Frequently Asked Questions
What is the remote work policy for this position?
The position is fully remote within the United States. Employees who live within commuting distance of the San Francisco or New York offices have in-office anchor days on Mondays, Tuesdays, and Fridays.
What is the salary range for the Security Software Engineer IAM role?
The base pay range for San Francisco, CA is $208,000 to $312,000, determined by job-related skills, experience, and location. Compensation outside of San Francisco may be adjusted based on location, and total compensation can include equity and variable pay.
What employment type is this job?
This is a full-time position.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.