Senior IAM Security Engineer - Self-Serve Access & IaC

Vercel Inc.; New York (NY); Hybrid; USD 208,000 - 312,000; Full time

Benefits offered by this job

Equity

Healthcare

Mentorship & events

Flexible time off

WFH budget

Job summary

Vercel Inc. is seeking a Security Software Engineer, IAM, to own identity and IAM end-to-end, building an access platform that is self-serve, time-bound, and provable.

This hybrid role is based in San Francisco or New York City with three days in the office. You will migrate IAM config to Terraform, unify corporate and production IAM, and design least-privilege access across cloud and services, while collaborating with Accounts to define policy-driven access for agents and users.

Qualifications

• 7+ years building and owning identity, access management, or platform security systems.
• Experience with IAM in corporate and production environments (Okta/AWS/GCP).
• Proficiency in TypeScript/Node.js, Go, or Python with REST APIs.
• Terraform-based IAM infrastructure as code.

Responsibilities

• Migrate IAM configuration to Terraform and promote IaC adoption.
• Build self-serve access platform with just-in-time access.
• Own provisioning, deprovisioning, and access review workflows for SOC 2 evidence.
• Unify corporate and production IAM into a single identity plane with least-privilege.
• Define agent access workflows with Accounts team on identity.

Skills

IAM design

Security platform ownership

OAuth/OIDC/SAML/SCIM knowledge

Tools

TypeScript/Node.js

Go

Python

Terraform

REST APIs

Okta or equivalent

AWS/GCP

Job description

Vercel Inc. is seeking a Security Software Engineer, IAM, to own identity and IAM end-to-end, building an access platform that is self-serve, time-bound, and provable.

This hybrid role is based in San Francisco or New York City with three days in the office. You will migrate IAM config to Terraform, unify corporate and production IAM, and design least-privilege access across cloud and services, while collaborating with Accounts to define policy-driven access for agents and users.