{"id":2422,"url":"https://alion.io/job/vercel-security-software-engineer-iam","title":"Security Software Engineer, IAM","company":{"id":1110,"name":"Vercel","domain":"vercel.com","url":"https://alion.io/company/vercel","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":73,"open_postings":25,"ghost_share":0,"stale_share":0.84,"repost_share":0.04,"time_to_fill_p50_days":78,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Francisco, United States","United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":208000,"max":312000,"currency":"USD","period":"year","gross":null,"usd_annual":312000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"GCP","optional":false},{"name":"Go","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"Node JS","optional":false},{"name":"Okta","optional":false},{"name":"OpenAI","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"TypeScript","optional":false},{"name":"Vercel","optional":false},{"name":"JavaScript","optional":true}],"status":"live","first_seen_at":"2026-06-25T00:19:22Z","employer_posted_date":"2026-10-15","last_verified_at":"2026-10-17T11:08:56Z","board_verified":true,"closed_at":null,"days_open":114,"trust":{"level":"ok","repost_count":2,"flags":["repost"],"days_open":114},"description":"About Vercel:\nVercel is the agentic infrastructure company, freeing people and agents to ship what's next. For more than a decade we've helped builders move from idea to production with speed, security, and exceptional developer experience.\nNow we're scaling our products for both agents and people to ship and run software, built in the open and trusted by OpenAI, PayPal, Ramp, Supreme, and millions of developers worldwide.\nAbout the role\nWe are looking for a Security Software Engineer, IAM, to build identity and access management (IAM) infrastructure as software, not administer identity products, and this role suits a software engineer who has gone deep on identity or an IAM engineer with a strong engineering background. You will own identity and IAM end to end, replacing the approval queue with access that is self-serve, time-bound, and provable, built so identity is defined as code, reviewed in pull requests, deployed through CI, and observable in production, and you will help decide how agents act on behalf of users and systems. This is a hybrid role based in San Francisco or New York City, with three days a week in the office.\nWhat you’ll do:\nMigrate Okta and related IAM configuration to Terraform so every identity change is reviewed, tested, and versioned, and help engineering teams adopt infrastructure as code\nBuild a self-serve access platform, including just-in-time (JIT) access, that lets team and system owners define, request, and time-bound their own access\nOwn provisioning, deprovisioning, and access review workflows that generate System and Organization Controls 2 (SOC 2) audit evidence automatically\nUnify corporate IAM (employee identity, SaaS access, devices) and production IAM (service accounts, infrastructure permissions, on-call access) into one identity plane, and enforce least-privilege access across cloud, SaaS, and production infrastructure\nDefine and build how agents request and hold access, working with the Accounts team on product-facing identity\nWhat you need:\n7+ years building and owning identity, access management, or platform security systems, including IAM design across corporate (Okta or equivalent) and production (AWS or GCP) environments\nBuilt and operated production services or self-service platforms in TypeScript/Node.js, Go, or Python, including REST APIs\nImplemented OAuth2, OpenID Connect (OIDC), Security Assertion Markup Language (SAML), and System for Cross-domain Identity Management (SCIM) at the protocol level, including failure modes such as token replay and sync drift\nManaged IAM infrastructure as code in Terraform\nBonus if you:\nLed a Terraform migration for IAM or identity infrastructure at scale\nDesigned or built a JIT access system or access governance platform\nDesigned delegation or scoped-credential models for agents or service identities\nCompensation & Benefits:\nCompetitive compensation package, including equity.\nInclusive Healthcare Package.\nLearn and Grow - we provide mentorship and send you to events that help you build your network and skills.\nFlexible Time Off.\nWe will provide you the gear you need to do your role, and a WFH budget for you to outfit your space as needed.\nThe San Francisco, CA base pay range for this role is $208,000 - $312,000. Actual salary will be based on job-related skills, experience, and location. Compensation outside of San Francisco may be adjusted based on employee location. The total compensation package may include benefits, equity-based compensation, and eligibility for a company bonus or variable pay program depending on the role. Your recruiter can share more details during the hiring process. \nDisclosures:\nPrivacy: Please review our Job Applicant Privacy Policy for more information on how we handle your data.\n Equal Opportunity: Vercel is committed to fostering and empowering an inclusive community within our organization. We do not discriminate on the basis of race, religion, color, gender expression or identity, sexual orientation, national origin, citizenship, age, marital status, veteran status, disability status, or any other characteristic protected by law. Vercel encourages everyone to apply for our available positions, even if they don't necessarily check every box on the job description.","description_format":"text","description_chars":4259,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Flexible time off"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Platforms (IaaS & PaaS)","Developer Tools"],"lifecycle":[{"event":"open","at":"2026-06-25T00:19:22Z"},{"event":"close","at":"2026-10-02T23:51:50Z"},{"event":"reopen","at":"2026-10-08T08:54:49Z"},{"event":"close","at":"2026-10-13T21:46:02Z"},{"event":"reopen","at":"2026-10-15T20:11:27Z"}],"visa":[],"liveness":{"score":13,"band":"cold","label":"Long shot","p_open":1,"p_active":0.288,"p_room":0.44,"age_days":114,"expected_fill_days":78,"reasons":["conf:1","repost:2","stale_co","velocity","win:tail","crowd:"],"computed_at":"2026-10-17T05:46:00Z"},"pay":{"stated_usd_annual":312000,"is_top_pay":true},"html_url":"https://alion.io/job/vercel-security-software-engineer-iam","json_url":"https://alion.io/job/vercel-security-software-engineer-iam.json","meta":{"generated_at":"2026-10-17T11:30:37Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15049,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1110},"rest":"https://alion.io/mcp/rest/get_company?id=1110"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fvercel-security-software-engineer-iam"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fvercel-security-software-engineer-iam"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fvercel-security-software-engineer-iam"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/vercel-security-software-engineer-iam\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fvercel-security-software-engineer-iam"}]}