Staff Security Software Engineer: IAM & Identity Platform

Harvey; San Francisco (CA); On-site; USD 231,000 - 340,000; Full time

Job summary

Harvey is seeking a Staff Software Engineer for the Security Engineering team in San Francisco. You will define the technical strategy for identity and access, shaping how customers and internal users authenticate, authorize, and the permissions they receive.

The role focuses on building scalable identity platforms, extending to agentic identities, and aligning with product engineering to deliver secure, fast sign-in experiences across Harvey’s services.

Qualifications

• 10+ years of experience building and operating production software with impact across teams or domains.
• Deep expertise in authentication, federation, authorization, entitlement modeling, or privileged access.
• Fluency with AI-assisted development tools and applying strong engineering judgment.
• Experience designing identity or authorization platforms used by other teams.
• Experience delivering foundational systems with meaningful adoption and impact.
• Experience with cloud platforms (Azure/GCP/AWS) and modern distributed systems.

Responsibilities

• Define Harvey's multi-year technical strategy for identity, authentication, authorization, and privileged access.
• Design and build complex identity systems from greenfield, write code, instrument, and operate in production.
• Lead architecture and cross-functional initiatives to right-size access at scale across identity and access controls.
• Extend identity models to non-human/agentic identities and ensure authenticated, scoped, auditable access.
• Serve as technical authority for identity and access and guide design reviews and roadmaps.

Skills

Identity & Access engineering

Authentication

Authorization

AI fluency

Cloud security

Security architecture

Leadership

Cross-functional collaboration

Tools

OIDC

SAML

OPA/Cedar

IAM libraries

Job description

Harvey is seeking a Staff Software Engineer for the Security Engineering team in San Francisco. You will define the technical strategy for identity and access, shaping how customers and internal users authenticate, authorize, and the permissions they receive.

The role focuses on building scalable identity platforms, extending to agentic identities, and aligning with product engineering to deliver secure, fast sign-in experiences across Harvey’s services.