Drimva

Harvey

Staff Security Software Engineer, IAM

$231K–$340K

San Francisco · Hybrid · Staff · Full-time · Posted Oct 1, 2026

Experience
10+ years.

About the job

Defines Harvey’s identity and access strategy and builds production systems for customer, workforce, and AI-agent authentication, authorization, and access management.

What you'll do

  • Set technical strategy for identity, authentication, authorization, and privileged access; guide architecture and roadmaps.
  • Design, build, instrument, and operate identity systems, and lead cross-functional access initiatives.
  • Extend identity systems to AI agents so they are authenticated, appropriately scoped, and auditable.

What they ask for

  • 10+ years experience building and operating production software, with demonstrated impact across multiple teams or technical domains.
  • Deep expertise in several identity and access domains, such as authentication, federation, authorization, entitlement modeling, or privileged access.
  • Experience designing identity or authorization platforms, libraries, or abstractions used by other engineering teams.
  • Experience with cloud infrastructure and modern distributed-system patterns; AI fluency and strong stakeholder communication are also required.

Nice to have

  • Experience with SCIM, OIDC, SAML, OPA or Cedar, Zanzibar-style authorization systems, or hardware-backed credentials.
  • Experience with IGA or PAM platforms, joiner/mover/leaver workflow automation, hyper-growth startups, or regulated environments such as FedRAMP.

Pay

$231,000 - $340,000 USD (base salary)

Tools

Azure, Google Cloud Platform, Amazon Web Services, SCIM, OpenID Connect (OIDC), Security Assertion Markup Language (SAML), Open Policy Agent (OPA), Cedar

AI focus

Use AI-assisted development tools and design agentic workflows that reduce repetitive toil; build identity systems that authenticate, scope, and audit AI agents, and explore AI-powered access management.

Model-written summary · the original posting is authoritative

First seen Oct 10, 2026 · Last verified Nov 5, 2026 (UTC)