
Vercel
Security Software Engineer, IAM at Vercel
$208,000–$312,000 / year
Apply for this positionRole overview
An at-a-glance view of the facts included with this Security Software Engineer, IAM at Vercel listing.
- Company
- Vercel
- Location
- Remote, United States
- Work arrangement
- Remote
- Employment type
- Full-time
- Compensation
- $208,000–$312,000 / year
Applications for this listing are submitted through CareersForge. Use the form on this page, then sign in to your Candidate Portal to follow application updates and any interview invitation.
Role overview
This job description has been rewritten in fresh language using the facts in the listing. Source credit and original listing details are available below.
Vercel is hiring a full-time Security Software Engineer, IAM, for its Security team. The role owns identity and access management strategy across corporate and production environments, including setting architecture and standards, moving Okta configuration into Terraform, and guiding organization-wide IAM practices. The position reports to the Head of Security and is remote within the United States. Employees who live within commuting distance of the San Francisco or New York offices are expected to attend in-office anchor days on Monday, Tuesday, and Friday.
The work includes enforcing least-privilege access across cloud, SaaS, and production systems; partnering with engineering and platform teams; securing endpoint and mobile access with MDM/MAM tools; and automating account provisioning, deprovisioning, and access reviews. The engineer will also lead internal infrastructure cleanup efforts and act as an IAM specialist across Security, IT, and Engineering.
The listed San Francisco base salary range is $208,000–$312,000 per year. Actual pay depends on job-related skills, experience, and location; compensation outside San Francisco may be adjusted by location. Total compensation may include benefits, equity, and, depending on the role, eligibility for a company bonus or variable-pay program. Benefits listed include healthcare, flexible time off, mentorship and professional events, equipment, and a work-from-home budget.
Role at a glance: Vercel seeks a U.S.-remote Security Software Engineer to lead IAM across corporate and production environments, with a listed San Francisco salary range of $208,000–$312,000.
Responsibilities mentioned in the listing
- Set the end-to-end IAM roadmap, standards, and architecture for corporate and production systems.
- Move Okta and related IAM configuration into Terraform and promote infrastructure-as-code practices among engineering teams.
- Lead internal Vercel and infrastructure cleanup initiatives.
- Design and enforce least-privilege controls across cloud, SaaS, and production infrastructure.
- Work with platform and engineering teams to incorporate IAM practices into system design.
- Build and manage MDM/MAM tools for secure endpoint and mobile-device access.
- Automate provisioning, deprovisioning, and access-review processes.
Qualifications stated in the listing
- At least 7 years of experience in identity and access management or platform security engineering.
- Strong Okta expertise, including SSO, MFA, lifecycle management, and API-based automation.
- Terraform proficiency and a commitment to managing IAM infrastructure as code.
- Experience developing IAM strategy at scale across corporate IT/SaaS and production cloud environments.
- Hands-on AWS or GCP IAM experience, including service accounts, roles, and workload identity federation.
- Experience with MDM/MAM solutions such as Jamf, Intune, or equivalent.
- Ability to collaborate and align Engineering, IT, Compliance, and Security teams.
- Comfort making decisions and taking ownership in a fast-moving environment.
Full details from the source listing
About Vercel:
Vercel is the agentic infrastructure company. We free people and agents to ship what’s next.
For more than a decade, Vercel has shaped how the web is built. As the team behind Next.js, v0, and AI SDK, we create products that help builders move from idea to production with speed, security, and exceptional developer experience.
Now, software is entering a new era, and the next generation of products will not just be used by people. They will be built, extended, and operated by agents.
We are building the platform for that future, trusted by companies like OpenAI, PayPal, Ramp, Supreme, and millions of developers worldwide. Whether you’re building our products, supporting our customers, growing our community, or shaping our story, you’ll help define what comes next.
About the Role:
We're looking for aSecurity Software Engineer to join our Security team and own Vercel's Identity and Access Management strategy - across both corporate and production environments. This is a high-impact, ownership-heavy role: you'll define IAM architecture from the ground up, migrate Okta fully behind Terraform, and serve as the subject matter expert who levels up the entire organization on IAM best practices.
You will report to the Head of Security and be located remotely within the United States. If you're based within commuting distance of our SF or NY offices, the role includes in-office anchor days on Monday, Tuesday, and Friday.
What You Will Do:
- Own the full IAM strategy for both corporate and production environments - defining the roadmap, standards, and architecture end to end
- Migrate Okta and all related IAM configuration to Terraform, driving infrastructure-as-code adoption and leveling up engineering teams in its use
- Lead Vercel-on-Vercel and Vercel infrastructure cleanup initiatives, ensuring our internal systems reflect the same standards we sell to customers
- Design and enforce least-privilege access controls across cloud, SaaS, and production infrastructure
- Partner with platform and engineering teams to embed IAM best practices early in the design process
- Build and manage MDM/MAM tooling to secure endpoint and mobile device access across the organization
- Drive automation across provisioning, deprovisioning, and access review workflows
- Serve as the IAM subject matter expert across Security, IT, and Engineering
About You:
- 7+ years of experience in identity, access management, or platform security engineering
- Deep expertise with Okta - including SSO, MFA, lifecycle management, and API-driven automation
- Proficient in Terraform and committed to managing IAM infrastructure as code
- Experience designing IAM strategy at scale - across both corporate (IT/SaaS) and production (cloud infrastructure) environments
- Hands-on experience with AWS or GCP IAM - service accounts, roles, workload identity federation
- Background in MDM/MAM solutions (Jamf, Intune, or equivalent)
- Strong collaborator who can drive alignment across Engineering, IT, Compliance, and Security teams
- Comfortable operating with autonomy and owning decisions in a fast-moving environment
Bonus If You:
- Experience leading Terraform migrations for IAM or identity infrastructure at scale
- Background in SCIM, SAML, OIDC, and directory services (e.g., Google Workspace, Azure AD)
- Contributions to internal developer platforms or security tooling
- Experience at a developer tools, infrastructure, or SaaS company
- Certifications such as Okta Certified Professional/Administrator, AWS Security Specialty, or CISSP
Benefits:
- Competitive compensation package, including equity.
- Inclusive Healthcare Package.
- Learn and Grow - we provide mentorship and send you to events that help you build your network and skills.
- Flexible Time Off.
- We will provide you the gear you need to do your role, and a WFH budget for you to outfit your space as needed.
The San Francisco, CA base pay range for this role is $208,000 - $312,000. Actual salary will be based on job-related skills, experience, and location. Compensation outside of San Francisco may be adjusted based on employee location. The total compensation package may include benefits, equity-based compensation, and eligibility for a company bonus or variable pay program depending on the role. Your recruiter can share more details during the hiring process.
Vercel is committed to fostering and empowering an inclusive community within our organization. We do not discriminate on the basis of race, religion, color, gender expression or identity, sexual orientation, national origin, citizenship, age, marital status, veteran status, disability status, or any other characteristic protected by law. Vercel encourages everyone to apply for our available positions, even if they don't necessarily check every box on the job description.
