Security Software Engineer, IAM

ABOUT THE ROLE We're seeking a highly skilled Security Software Engineer to join our Security team at Vercel. As the Security Software Engineer, IAM, you will be responsible for owning Vercel's Identity and Access Management strategy across both corporate and production environments. This is a high-impact, ownership-heavy role that requires defining IAM architecture from the ground up, migrating Okta fully behind Terraform, and serving as the subject matter expert who levels up the entire organization on IAM best practices. WHAT YOU'LL DO As a Security Software Engineer, IAM, you will be responsible for: - Defining the full IAM strategy for both corporate and production environments, including the roadmap, standards, and architecture end to end - Migrating Okta and all related IAM configuration to Terraform, driving infrastructure-as-code adoption and leveling up engineering teams in its use - Leading Vercel-on-Vercel and Vercel infrastructure cleanup initiatives, ensuring our internal systems reflect the same standards we sell to customers - Designing and enforcing least-privilege access controls across cloud, SaaS, and production infrastructure - Partnering with platform and engineering teams to embed IAM best practices early in the design process - Building and managing MDM/MAM tooling to secure endpoint and mobile device access across the organization - Driving automation across provisioning, deprovisioning, and access review workflows - Serving as the IAM subject matter expert across Security, IT, and Engineering WHAT YOU'LL NEED To be successful in this role, you will need: - 7+ years of experience in identity, access management, or platform security engineering - Deep expertise with Okta, including SSO, MFA, lifecycle management, and API-driven automation - Proficient in Terraform and committed to managing IAM infrastructure as code - Experience designing IAM strategy at scale across both corporate (IT/SaaS) and production (cloud infrastructure) environments - Hands-on experience with AWS or GCP IAM, including service accounts, roles, and workload identity federation - Background in MDM/MAM solutions (Jamf, Intune, or equivalent) - Strong collaboration and communication skills, with the ability to drive alignment across Engineering, IT, Compliance, and Security teams - Comfortable operating with autonomy and owning decisions in a fast-moving environment WHY REMOTE As a remote employee, you will have the flexibility to work from anywhere in the United States. While the role includes in-office anchor days on Monday, Tuesday, and Friday for those based within commuting distance of our SF or NY offices, the majority of your work will be done remotely. BENEFITS - Competitive compensation package, including equity - Inclusive Healthcare Package - Learn and Grow - we provide mentorship and send you to events that help you build your network and skills - Flexible Time Off - We will provide you the gear you need to do your role, and a WFH budget for you to outfit your space as needed Salary: $208,000 - $312,000 (base pay range for this role in San Francisco, CA), with actual salary based on job-related skills, experience, and location.