Staff Security Software Engineer, IAM

Responsibilities

• Define Harvey’s multi-year technical strategy for identity, authentication, authorization, and privileged access.
• Design, build, instrument, and operate complex greenfield identity systems in production.
• Lead cross-functional initiatives involving authentication, permissions, authorization, entitlement modeling, and access controls.
• Extend identity systems to non-human and AI-agent identities so access is authenticated, scoped, and auditable.
• Act as the technical authority for identity and access architecture and guide design reviews, investment decisions, and long-term roadmaps.

Requirements

• 10+ years of experience building and operating production software, with demonstrated impact across multiple teams or technical domains.
• Deep expertise in several identity and access areas, including authentication, federation, authorization, entitlement modeling, or privileged access.
• Effective use of AI-assisted development tools and ability to design agentic workflows that automate repetitive work.
• Experience designing identity or authorization platforms, libraries, or abstractions used by other engineering teams.
• Experience delivering foundational systems that achieve meaningful organizational or customer adoption and outcomes.
• Experience with cloud infrastructure such as Azure, Google Cloud Platform, or Amazon Web Services, and modern distributed-system patterns.
• Strong communication skills and ability to align technical and non-technical stakeholders.
• Preferred experience with SCIM, OpenID Connect, SAML, OPA, Cedar, Zanzibar-style authorization systems, hardware-backed credentials, IGA, PAM, joiner/mover/leaver automation, hyper-growth startups, or regulated environments such as FedRAMP.