Staff Security Engineer - Identity & Access Platform

Harvey, Inc.; San Francisco, Northern (CA, KY); Hybrid; USD 231,000 - 340,000; Full time

Job summary

Harvey, Inc. is seeking a Staff Software Engineer on the Security Engineering team to define and drive the technical strategy for identity and access.

You will build production-grade identity systems, shape end-to-end authentication experiences, and guide cross-functional alignment across engineering, security, and product teams. You will extend identity to non-human identities and AI agents, ensuring secure, auditable access across Harvey’s platforms.

Qualifications

• 10+ years building and operating production software.
• Expertise in authentication, federation, authorization, entitlement modeling, or PAM.
• Experience with cloud infrastructure (Azure, GCP, AWS) and distributed systems.
• Strong communication across technical and non-technical stakeholders.
• Designs identity platforms or libraries used by other teams.

Responsibilities

• Define Harvey's multi-year technical strategy for identity, authentication, authorization, and privileged access.
• Design and build complex identity systems from greenfield, writing code and operating in production.
• Lead architecture and cross-functional initiatives to right-size access at scale across identity, permissions, and access controls.
• Extend the identity model to non-human and agentic identities, including AI agents acting on behalf of users.
• Serve as technical authority for identity and access architecture and guide major design reviews.

Skills

Identity & access engineering

AI fluency

Cross-team collaboration

Cloud infrastructure

Tools

OIDC

SAML

OPA/Cedar

Job description

Harvey, Inc. is seeking a Staff Software Engineer on the Security Engineering team to define and drive the technical strategy for identity and access.

You will build production-grade identity systems, shape end-to-end authentication experiences, and guide cross-functional alignment across engineering, security, and product teams. You will extend identity to non-human identities and AI agents, ensuring secure, auditable access across Harvey’s platforms.