Security Software Engineer, IAM

Vercel is hiring a Security Software Engineer to own its Identity and Access Management strategy across both corporate and production environments. This is a high-impact, ownership-heavy role: you will define IAM architecture from the ground up, migrate Okta fully behind Terraform, and serve as the subject matter expert who levels up the entire organization on IAM best practices. You will report to the Head of Security.

Responsibilities

• Own the full IAM strategy for corporate and production environments, defining the roadmap, standards, and architecture end to end.
• Migrate Okta and all related IAM configuration to Terraform, driving infrastructure-as-code adoption and leveling up engineering teams in its use.
• Lead Vercel-on-Vercel and infrastructure cleanup initiatives, ensuring internal systems reflect the same standards Vercel sells to customers.
• Design and enforce least-privilege access controls across cloud, SaaS, and production infrastructure.
• Partner with platform and engineering teams to embed IAM best practices early in the design process.
• Build and manage MDM/MAM tooling to secure endpoint and mobile device access across the organization.
• Drive automation across provisioning, deprovisioning, and access review workflows.
• Serve as the IAM subject matter expert across Security, IT, and Engineering.

Qualifications

• 7+ years of experience in identity, access management, or platform security engineering.
• Deep expertise with Okta, including SSO, MFA, lifecycle management, and API-driven automation.
• Proficiency in Terraform and a commitment to managing IAM infrastructure as code.
• Experience designing IAM strategy at scale across both corporate (IT/SaaS) and production (cloud infrastructure) environments.
• Hands-on experience with AWS or GCP IAM: service accounts, roles, workload identity federation.
• Background in MDM/MAM solutions such as Jamf or Intune.
• Strong collaborator who can drive alignment across Engineering, IT, Compliance, and Security, comfortable operating with autonomy in a fast-moving environment.
• Bonus: SCIM, SAML, OIDC, and directory services experience, or certifications such as Okta Certified Professional, AWS Security Specialty, or CISSP.