Security Software Engineer, IAM

Vercel; United States; On-site; USD 208,000 - 312,000; Full time

Benefits offered by this job

Competitive compensation package, including equity.

Mentorship and networking opportunities.

Flexible Time Off.

Work from home budget.

Job summary

Vercel is looking for a Security Software Engineer to own the IAM strategy across corporate and production environments. This role involves defining architecture, migrating to Terraform, and enforcing security best practices. Ideal candidates will have extensive experience in IAM, Terraform proficiency, and strong interpersonal skills.

This position allows flexibility with remote work within the United States, including potential in-office days in SF or NY. Exceptional pay range of $208k to $312k and inclusive company culture are offered as part of the total compensation package.

Qualifications

• 7+ years of experience in identity, access management, or platform security engineering.
• Deep expertise with Okta, including SSO, MFA, and API-driven automation.
• Proficient in Terraform and managing IAM infrastructure as code.
• Experience designing IAM strategy across corporate and production environments.

Responsibilities

• Define IAM strategy for corporate and production environments.
• Migrate Okta configuration to Terraform for better management.
• Ensure internal systems adhere to security standards and practices.
• Design least-privilege access controls across cloud and SaaS systems.

Skills

Identity and access management

Platform security engineering

Okta expertise

Terraform

AWS or GCP IAM

MDM/MAM solutions

Collaboration skills

Job description

About the Role:

We're looking for a Security Software Engineer to join our Security team and own Vercel's Identity and Access Management strategy - across both corporate and production environments. This is a high-impact, ownership-heavy role: you'll define IAM architecture from the ground up, migrate Okta fully behind Terraform, and serve as the subject matter expert who levels up the entire organization on IAM best practices.

You will report to the Head of Security and be located remotely within the United States. If you're based within commuting distance of our SF or NY offices, the role includes in-office anchor days on Monday, Tuesday, and Friday.

What You Will Do:

• Own the full IAM strategy for both corporate and production environments - defining the roadmap, standards, and architecture end to end
• Migrate Okta and all related IAM configuration to Terraform, driving infrastructure-as-code adoption and leveling up engineering teams in its use
• Lead Vercel-on-Vercel and Vercel infrastructure cleanup initiatives, ensuring our internal systems reflect the same standards we sell to customers
• Design and enforce least-privilege access controls across cloud, SaaS, and production infrastructure
• Partner with platform and engineering teams to embed IAM best practices early in the design process
• Build and manage MDM/MAM tooling to secure endpoint and mobile device access across the organization
• Drive automation across provisioning, deprovisioning, and access review workflows
• Serve as the IAM subject matter expert across Security, IT, and Engineering

About You:

• 7+ years of experience in identity, access management, or platform security engineering
• Deep expertise with Okta - including SSO, MFA, lifecycle management, and API-driven automation
• Proficient in Terraform and committed to managing IAM infrastructure as code
• Experience designing IAM strategy at scale - across both corporate (IT/SaaS) and production (cloud infrastructure) environments
• Hands‑on experience with AWS or GCP IAM - service accounts, roles, workload identity federation
• Background in MDM/MAM solutions (Jamf, Intune, or equivalent)
• Strong collaborator who can drive alignment across Engineering, IT, Compliance, and Security teams
• Comfortable operating with autonomy and owning decisions in a fast‑moving environment

Bonus If You:

• Experience leading Terraform migrations for IAM or identity infrastructure at scale
• Background in SCIM, SAML, OIDC, and directory services (e.g. Google Workspace, Azure AD)
• Contributions to internal developer platforms or security tooling
• Experience at a developer tools, infrastructure, or SaaS company
• Certifications such as Okta Certified Professional/Administrator, AWS Security Specialty, or CISSP
• Competitive compensation package, including equity.
• Learn and Grow – we provide mentorship and send you to events that help you build your network and skills.
• Flexible Time Off.
• We will provide you the gear you need to do your role, and a WFH budget for you to outfit your space as needed.

The San Francisco, CA base pay range for this role is $208,000 - $312,000. Actual salary will be based on job-related skills, experience, and location. Compensation outside of San Francisco may be adjusted based on employee location. The total compensation package may include benefits, equity-based compensation, and eligibility for a company bonus or variable pay program depending on the role. Your recruiter can share more details during the hiring process.

Vercel is committed to fostering and empowering an inclusive community within our organization. We do not discriminate on the basis of race, religion, color, gender expression or identity, sexual orientation, national origin, citizenship, age, marital status, veteran status, disability status, or any other characteristic protected by law. Vercel encourages everyone to apply for our available positions, even if they don't necessarily check every box on the job description.