Remote opportunity at
VercelSecurity Software Engineer, IAM
Vercel, the agentic infrastructure company that helps builders take software from concept to production with speed and security, is seeking a remote Security Software Engineer specializing…
Career Tools
About This Role
Vercel, the agentic infrastructure company that helps builders take software from concept to production with speed and security, is seeking a remote Security Software Engineer specializing in IAM. This role moves away from traditional approval queues and quarterly spreadsheet audits by treating identity infrastructure as software. The selected engineer will own the complete IAM strategy for corporate, production, and product environments, uniting disparate security silos into a single identity plane.…
Job Description
Vercel, the agentic infrastructure company that helps builders take software from concept to production with speed and security, is seeking a remote Security Software Engineer specializing in IAM. This role moves away from traditional approval queues and quarterly spreadsheet audits by treating identity infrastructure as software. The selected engineer will own the complete IAM strategy for corporate, production, and product environments, uniting disparate security silos into a single identity plane. Responsibilities include migrating Okta and all related configurations to Terraform, building self-serve access governance tools such as just-in-time access, and developing automated provisioning and review workflows that simplify SOC 2 compliance. Furthermore, the position involves determining how identity and access will function for AI agents alongside human users.
This opportunity is ideal for software engineers who have a strong background in identity or IAM engineers with robust software development skills who prefer building frameworks over manual administration. Candidates can work remotely within the United States or report to the New York or San Francisco offices with mandatory in-office anchor days on Monday, Tuesday, and Friday. Security leadership is based remotely within the United States.
Vercel offers an inclusive healthcare package, equity, competitive compensation, flexible time off, mentorship opportunities, event allowances, work equipment, and a remote work-from-home budget. Equal opportunity employer policies apply, welcoming applicants from all backgrounds.
Responsibilities
- Manage the complete IAM strategy end to end across corporate, production, and product environments.
- Migrate Okta and related IAM configurations fully behind Terraform to enable version-controlled infrastructure.
- Develop self-serve access governance tools and just-in-time access frameworks to remove security bottlenecks.
- Construct automated provisioning, deprovisioning, and access review workflows that generate audit evidence automatically.
- Collaborate with the Accounts team to connect internal IAM systems with Vercel product roles, SSO, SCIM, and API tokens.
- Establish least-privilege access controls across cloud, SaaS, and production infrastructure alongside platform teams.
- Help define and build the initial identity and access architecture for autonomous agents interacting with Vercel systems.
Requirements
- Have at least 7 years of professional experience in identity, access management, or platform security engineering.
- Demonstrate experience designing internal tools or self-service platforms rather than simply administering existing ones.
- Show proficiency in a production programming language such as TypeScript, Node.js, Go, or Python.
- Possess proficiency in Terraform and experience managing IAM infrastructure as code.
- Understand identity protocols like OAuth2, OIDC, SAML, and SCIM at the implementation level.
- Bring design experience across both corporate environments like Okta and production environments like AWS or GCP IAM.
Qualifications
- Led a large-scale Terraform migration for identity infrastructure previously.
- Designed or built just-in-time access systems or access governance platforms in past roles.
- Built or managed MDM or Jamf, Intune, and device-trust integrations with identity tools.
- Familiarity with Vercel product IAM features such as team roles, enterprise SSO, and API tokens.
- Developed a clear perspective on agent identity delegation, scoped credentials, and impersonation boundaries.
- Prior experience working at a SaaS, infrastructure, or developer tools company.
- Holds certifications such as Okta Certified Professional or Administrator, AWS Security Specialty, or CISSP.
Core Skills
Benefits
- Competitive compensation package including equity
- Inclusive healthcare package
- Mentorship programs and conference or event attendance allowances
- Flexible time off
- Provided work equipment and a work-from-home budget to outfit personal workspace
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
What is the remote work policy for this position?
The role is remote within the United States. Candidates who live within commuting distance of the San Francisco or New York offices are subject to in-office anchor days on Mondays, Tuesdays, and Fridays.
What salary does Vercel offer for this role?
The base pay range for the San Francisco, CA location is $208,000 to $312,000, with actual compensation determined by skills, experience, and location. Compensation outside of San Francisco may be adjusted accordingly, and total packages may include equity, benefits, and variable pay.
What type of employment is this?
This is a full-time employment opportunity.
How can I apply for this job?
You can apply through the application link provided in the original job posting source.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.