Senior IAM Engineer — Remote, Self-Serve Access & IaC

Mosaec; San Francisco (CA); Hybrid; USD 208,000 - 312,000; Full time

Benefits offered by this job

Equity

Healthcare package

Mentorship & events

Flexible time off

WFH equipment budget

Job summary

Vercel is hiring a Security Software Engineer specializing in IAM to architect and build self-serve, time-bound access systems. You will migrate Okta configurations to Terraform and own provisioning, deprovisioning, and access reviews.

Lead the design of identity infrastructure across corporate and production environments, including agent identity considerations, with a focus on least-privilege and scalable IAM solutions.

Qualifications

• 7+ years of experience in identity, access management, or platform security engineering.
• Experience building internal tools or self-service platforms, not just administering existing ones.
• Proficient in a production language (TypeScript/Node.js, Go, or Python) and REST APIs.
• Proficient in Terraform and managing IAM infrastructure as code.
• Hands-on with identity protocols (OAuth2, OIDC, SAML, SCIM) at implementation level.
• Experience designing IAM at scale across corporate and production environments.
• Systems thinker with a scale-focused mindset.
• Strong collaborator across Engineering, IT, Compliance, Security teams.
• Comfortable operating with autonomy in a fast-moving environment.

Responsibilities

• Own the full IAM strategy for corporate, production, and product environments end to end.
• Migrate Okta and related IAM configuration to Terraform to enable IaC adoption.
• Build self-serve access governance tooling including just-in-time access.
• Own provisioning, deprovisioning, and access review workflows; ensure audit trails.
• Collaborate with Accounts team and product engineers to connect IAM across domains.
• Design and enforce least-privilege access controls across cloud, SaaS, and prod infra.
• Help define identity and access for agents, beyond human users.

Skills

Identity & access management

Self-service tools

Production languages

Terraform

OAuth2/OIDC/SAML/SCIM

IAM at scale

Systems thinking

Cross-functional collaboration

Autonomy

Job description

Vercel is hiring a Security Software Engineer specializing in IAM to architect and build self-serve, time-bound access systems. You will migrate Okta configurations to Terraform and own provisioning, deprovisioning, and access reviews.

Lead the design of identity infrastructure across corporate and production environments, including agent identity considerations, with a focus on least-privilege and scalable IAM solutions.