Security Software Engineer, IAM

Owns identity and access management at Vercel as an engineering problem, building IAM infrastructure in code rather than administering identity products. The engineer moves Okta and related configuration into Terraform, builds a self-serve platform for just-in-time, time-limited access, automates provisioning, deprovisioning and access reviews so they produce SOC 2 evidence, and brings corporate and production identity together under least privilege. Working with the Accounts team, the role also designs how AI agents request and hold access. Vercel wants seven or more years building identity or platform security systems across Okta and AWS or GCP, production services in TypeScript, Go or Python, protocol-level work with OAuth2, OIDC, SAML and SCIM, and IAM managed in Terraform. Hybrid, three office days a week in San Francisco or New York.