# Staff Security Software Engineer, IAM

**Company:** [Harvey](https://hotfix.jobs/companies/harvey)
**Location:** San Francisco, CA
**Role:** Security Engineering
**Salary:** $231k – $340k/yr
**Experience:** 10+ years
**Skills:** IAM, Authentication, Authorization, Federation, Entitlement Modeling, Privileged Access, SCIM, Openid Connect, SAML, Open Policy Agent, Cedar, Cloud Infrastructure, Distributed Systems, AI Agents
**Posted:** 2026-09-02

> Staff Security Software Engineer leading identity and access strategy, architecture, and hands-on platform development across customer, employee, contractor, and agentic identities. Requires 10+ years of production software experience and deep expertise in identity and authorization systems.

## Job Description

## Responsibilities
- Define Harvey’s multi-year technical strategy for identity, authentication, authorization, and privileged access.
- Design and build complex identity systems from the ground up, including production code, instrumentation, and operational ownership.
- Lead cross-functional initiatives covering identity and authentication, permissions and authorization, entitlement modeling, and access controls.
- Extend identity models to non-human and agentic identities so AI agents acting for users are authenticated, scoped, and auditable.
- Serve as the technical authority for identity and access architecture, guiding design reviews, investment decisions, and long-term roadmaps.

## Requirements
- 10+ years of experience building and operating production software, with demonstrated impact across multiple teams or technical domains.
- Deep expertise in several identity and access domains, including authentication, federation, authorization, entitlement modeling, or privileged access.
- Effective use of AI-assisted development tools and strong engineering judgment when designing agentic workflows.
- Experience designing identity or authorization platforms, libraries, or abstractions adopted by other engineering teams.
- Experience delivering foundational systems that improve organizational or customer outcomes.
- Experience with cloud infrastructure and modern distributed-system patterns.
- Strong communication skills and the ability to align technical and non-technical stakeholders.

## Nice to Have
- Experience with SCIM, OpenID Connect, SAML, policy engines such as Open Policy Agent or Cedar, Zanzibar-style authorization systems, or hardware-backed credentials.
- Experience with identity governance and administration or privileged access management platforms, including automated joiner, mover, and leaver workflows.
- Experience building identity platforms or programs at a hyper-growth startup.
- Experience in regulated environments such as FedRAMP, including phishing-resistant authentication and authenticator assurance requirements.

## Compensation
- $231,000–$340,000 USD, depending on location.

## Similar jobs

- [Staff Software Engineer - Site Defense](https://hotfix.jobs/jobs/63710e8e-8a7b-47ad-8aa3-7c6ab86c292f) - Reddit - Remote - $217k – $304k/yr
- [Senior Staff IT Controls, Enterprise Applications](https://hotfix.jobs/jobs/a9450204-c76d-43df-b449-432e5bb2b6ad) - Gusto - San Francisco, CA - $245k – $265k/yr
- [Staff Application Security Engineer](https://hotfix.jobs/jobs/7ac2e48a-851e-4e49-8cb6-83a44f82862c) - Upside - Remote - $210k – $230k/yr
- [Staff Security Engineer, Cloud and Product Security](https://hotfix.jobs/jobs/6f63ec23-4c3f-4815-b236-397f5ba0189d) - Lob - Remote - $198k – $220k/yr
- [Staff Engineer - Container Security](https://hotfix.jobs/jobs/935b4780-2b70-443a-b457-18e396232e5a) - Illumio - Sunnyvale, CA - $194k – $233k/yr

**Apply:** https://hotfix.jobs/jobs/1db52e2b-57a0-4c79-82d9-00437371381f
**Canonical:** https://hotfix.jobs/jobs/1db52e2b-57a0-4c79-82d9-00437371381f