Vercel Is Hiring a Remote Security Engineer to Rebuild IAM From Scratch
Vercel wants to tear down the old 'approval queue' model of identity management and replace it with something engineers actually want to work on.
If you've spent time inside a traditional identity and access management team, you know the drill: tickets come in, someone grants access, nobody revokes it, and every quarter there's a painful spreadsheet audit. Vercel is explicitly building against that pattern — and they're hiring a Security Software Engineer to lead the effort.
The San Francisco-based company, which powers deployments for names like OpenAI, PayPal, and Ramp, is fully remote across the United States for this role. What makes the position interesting is the philosophy behind it: they want IAM to behave like code — version-controlled, reviewed in pull requests, shipped through CI pipelines, and observable in production. That's a meaningfully different mindset from treating access management as a helpdesk function.
For security-minded engineers who've felt frustrated watching access sprawl pile up because the review process can't keep pace with a growing org, this is the kind of greenfield problem worth paying attention to. The goal is a system where access is self-serve, time-limited, and auditable by design — not by manual assembly after the fact.
Vercel describes itself as an 'agentic infrastructure company,' which signals they're thinking about access management not just for human employees but for the AI agents increasingly running alongside them. That's a genuinely new design constraint, and it'll shape what this role builds.
Inspired by reporting from We Work Remotely: Remote jobs in design, programming, marketing and more.