About this role
Architecting and building identity systems from the ground up, you will define the multi-year technical strategy for authentication, authorization, and privileged access at Harvey. Operating at the intersection of security, infrastructure, and product engineering, the work involves designing platforms for both customer authentication and internal employee or non-human identity management. You will also explore how AI-powered access management can adapt to evolving organizational needs while establishing fast and secure sign-in experiences across customer surfaces.
As a founding member of the security engineering team, you will establish foundational technical direction and drive cross-functional alignment. Success in the position requires substantial experience building production software and deep expertise in identity domains, allowing you to mentor others, guide major design reviews, and scale robust identity infrastructure.
What you will do
- Formulate and execute the long-term technical roadmap for identity, authentication, authorization, and privileged access.
- Architect and develop complex identity solutions from greenfield, maintaining direct ownership of production code.
- Drive cross-functional projects focused on entitlement modeling, access controls, and scaled permissions management.
- Scale the identity framework to securely authenticate, scope, and audit non-human and agentic AI identities.
- Act as the primary technical authority for identity architecture by leading design reviews and strategic investment choices.
What you need
- Bring a minimum of 10 years of experience building and running production software across various technical domains.
- Possess advanced knowledge in identity and access areas such as federation, authentication, authorization, or privileged access.
- Demonstrate fluency with AI by effectively using assisted development tools and designing automated agentic workflows.
- Show past success in architecting identity platforms, libraries, or abstractions utilized by engineering peers.
- Demonstrate hands-on familiarity with cloud infrastructure platforms including AWS, Azure, or Google Cloud Platform.
- Exhibit strong communication abilities to build consensus among both technical and non-technical stakeholders.
Nice to have
- Experience with OIDC, SAML, SCIM, hardware-backed credentials, and policy engines like OPA or Cedar or Zanzibar-style authorization systems.
- Background in identity governance and administration or privileged access management platforms, plus automating joiner, mover, and leaver workflows.
- Prior involvement building identity programs within a hyper-growth startup environment.
- Familiarity with regulated sectors like FedRAMP, including phishing-resistant authentication requirements.
Benefits
- Offers Equity
- Offers Bonus
Skills and tech stack
Questions candidates ask
What is the compensation range for this role?
The salary range for this position is $231,000 to $340,000 USD, with equity and bonus offerings included.
Where is the position located?
The role is located in San Francisco.