Staff Identity & Access Security Engineer

Harvey; San Francisco (CA); On-site; USD 231,000 - 340,000; Full time

Job summary

Harvey is seeking a Staff Software Engineer on the Security Engineering team to define and drive identity and access strategy. You will own authentication, authorization, and privileged access, extending to non-human identities, and shape an auditable, scalable system across Harvey's platform.

The role blends security, infrastructure, and product engineering with hands-on coding and high-level technical direction to empower engineers and secure customer data.

Qualifications

• 10+ years building production software across multiple teams.
• Expert in identity and access engineering domains.
• Experience with cloud infrastructure and modern distributed patterns.
• Strong communication and stakeholder alignment.

Responsibilities

• Define Harvey's multi-year technical strategy for identity, authentication, authorization, and privileged access.
• Design and build complex identity systems from greenfield—writing code, instrumenting, and operating in production.
• Lead architecture and execution of cross-functional initiatives to right-size access at scale.
• Extend the identity model to non-human and agentic identities, ensuring authentication, scoping, and auditability.
• Serve as the technical authority for identity and access architecture and guide major design reviews, investments, and roadmaps.

Skills

10+ years experience

Identity & access

AI familiarity

Cloud platforms

Architecture design

Cross-functional leadership

Production systems

Security fundamentals

Communication skills

Non-human identities

Tools

Azure

Google Cloud Platform

Amazon Web Services

Job description

Harvey is seeking a Staff Software Engineer on the Security Engineering team to define and drive identity and access strategy. You will own authentication, authorization, and privileged access, extending to non-human identities, and shape an auditable, scalable system across Harvey's platform.

The role blends security, infrastructure, and product engineering with hands-on coding and high-level technical direction to empower engineers and secure customer data.