SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 231,000 - 340,000 / annual
Harvey is an AI platform transforming legal and professional services. As a Staff Security Software Engineer on the Security Engineering team, you will be a founding member defining and driving the technical strategy for identity and access management across the platform.
You will own Harvey's multi-year IAM strategy, covering customer authentication, employee/contractor access, and non-human identity management. Key responsibilities include designing complex identity systems from greenfield, leading cross-functional initiatives to scale access controls, extending the identity model to AI agents, and serving as the technical authority for identity architecture.
The role operates at the intersection of security, infrastructure, and product engineering. While hands-on with code, your primary leverage comes through technical direction, platform adoption, cross-functional alignment, and enabling other engineers to build on strong identity foundations.
You'll tackle ambitious challenges: exploring how AI-powered access management can understand employee needs and recommend permissions, designing end-user/agent authentication experiences that are fast and secure across all surfaces, and building systems that adapt access as roles evolve.
Required: 10+ years building and operating production software with demonstrated impact across multiple teams. Deep expertise in identity and access engineering (authentication, federation, authorization, entitlement modeling, or privileged access). Fluency with AI-assisted development tools and agentic workflows. Experience designing identity/authorization platforms used by other teams. Cloud infrastructure experience (AWS, GCP, Azure) and modern distributed-system patterns. Strong communication and cross-stakeholder alignment skills.
Nice-to-have: SCIM, OIDC, SAML, policy engines (OPA, Cedar), Zanzibar-style authorization, hardware-backed credentials, IGA/PAM platforms, identity platform experience at hyper-growth startups, regulated environment experience (FedRAMP, phishing-resistant auth).
About Harvey
Legal / Compliance / Risk; AI / Data / Infrastructure — AI platform for legal and professional services work.
