Security Engineer: Identity & Access Platforms

Harvey; San Francisco (CA); On-site; USD 161,000 - 245,000; Full time

Job summary

Harvey is seeking a Software Engineer on the Security Engineering team to build and operate foundational security services for our customer-facing product and internal systems. You’ll work on identity and access management, secrets and privileged access, and agent sandboxes, ensuring secure by default practices across platforms.

Join a team where security is an engineering discipline, not a gatekeeper function, and contribute to scalable, risk-informed security solutions with a focus on

Qualifications

• 2+ years of software engineering experience, including shipping and operating production services.
• Experience building or contributing to security infrastructure such as identity and access management, authentication and authorization, secrets management, or privileged access.
• Strong programming, debugging, testing, and problem-solving skills across unfamiliar systems and domains.
• Experience with cloud infrastructure such as Azure, GCP, or AWS and familiarity with distributed-system patterns.
• Track record translating security requirements into maintainable, automated systems.
• Experience using agentic coding tools and creating workflows that automate security tasks.

Responsibilities

• Build and operate Harvey’s core identity and access services across customer-facing product, workforce, and infrastructure systems, including authentication, authorization, access governance, secrets, and privileged access.
• Evolve how Harvey customers set up environments, making security-aware configuration both delightful and secure by default.
• Build identity controls, sandboxes, and safety harnesses that enable least privilege and auditable actions.
• Create secure-by-default libraries, paved-road abstractions, self-service tooling, and agentic workflows for security triage and remediation.
• Take security systems from design through production, considering trust boundaries and failure modes while ensuring reliability and security.
• Participate in on-call rotations, contribute to incident response, and raise the engineering bar through reviews and documentation.

Skills

Software engineering

IAM systems

Agent tooling

Cloud experience

Tools

Azure

GCP

AWS

OpenID Connect

Job description

Harvey is seeking a Software Engineer on the Security Engineering team to build and operate foundational security services for our customer-facing product and internal systems. You’ll work on identity and access management, secrets and privileged access, and agent sandboxes, ensuring secure by default practices across platforms.

Join a team where security is an engineering discipline, not a gatekeeper function, and contribute to scalable, risk-informed security solutions with a focus on