> Markdown version of [/jobs/ext/4012629-security-software-engineer-iam](https://www.wearedevelopers.com/jobs/ext/4012629-security-software-engineer-iam). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Software Engineer, IAM

- **Company:** Vercel Inc.
- **Location:** New York, NY, United States (Remote available)
- **Experience:** Expert
- **Salary:** $208,000.0 - $312,000.0
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Software as a Service, Code Review, Identity and Access Management, Python (Programming Language), Node.Js, OAuth, OpenID, Openid Connect, Security Assertion Markup Language (SAML), Security Software, Server Administration, Software Engineering, TypeScript, Okta, Data Management, Restful APIs, Terraform
- **Published:** October 29, 2026
- **Apply:** https://www.careerbuilder.com/job-details/security-software-engineer-iam-new-york-ny--24c35578-9c8a-45be-aa4d-cd5c956b3f51

## About the Role

Security Software, Software Engineering, Software Engineering, Identity Data Management, Infrastructure Software, Code Reviews, Software Administration, Security Software, Software as a Service (SaaS), On Call, * 7+ years in identity, access management, or platform security engineering, including IAM design across corporate (Okta or equivalent) and production (AWS or GCP) environments

 * Built and operated production services or self-service platforms in TypeScript/Node.js, Go, or Python, including REST APIs
 * Implemented OAuth2, OpenID Connect (OIDC), Security Assertion Markup Language (SAML), and System for Cross-domain Identity Management (SCIM) at the protocol level, including failure modes such as token replay and sync drift
 * Managed IAM infrastructure as code in Terraform

## Description

We are looking for a Security Software Engineer, IAM, to build identity and access management (IAM) infrastructure as software, not administer identity products, and we want a software engineer who has gone deep on identity or an IAM engineer with a strong engineering background. You will replace the approval queue with access that is self-serve, time-bound, and provable, built so identity is defined as code, reviewed in pull requests, deployed through CI, and observable in production, and you will help decide how agents act on behalf of users and systems. This is a hybrid role based in San Francisco or New York City, with three days a week in the office.

What you'll do:

 * Migrate Okta and related IAM configuration to Terraform so every identity change is reviewed, tested, and versioned, and help engineering teams adopt infrastructure as code
 * Build a self-serve access platform, including JIT access, that lets team and system owners define, request, and time-bound their own access
 * Own provisioning, deprovisioning, and access review workflows that generate System and Organization Controls 2 (SOC 2) audit evidence automatically
 * Unify corporate IAM (employee identity, SaaS access, devices) and production IAM (service accounts, infrastructure permissions, on-call access) into one identity plane, and enforce least-privilege access across cloud, SaaS, and production infrastructure
 * Define and build how agents request and hold access, working with the Accounts team on product-facing identity