2 months ago
Base Salary
$188k - $282k/yr
Responsibilities
- Design, build, and operate authentication, authorization, access governance, secrets management, and privileged access services.
- Own identity infrastructure including SSO, SCIM, and fine-grained enterprise authorization.
- Build secure-by-default libraries, paved-road abstractions, and self-service security tooling.
- Take security systems from greenfield architecture through production deployment, instrumentation, and reliability ownership.
- Contribute to incident response and drive technical mitigation for security issues.
- Raise security standards through design reviews, code reviews, and technical mentorship.
Requirements
- 5+ years of software engineering experience shipping and operating production services.
- Hands-on experience building security infrastructure such as IAM, authentication and authorization, secrets management, or privileged access.
- Knowledge of common vulnerability classes and the ability to analyze attacker-focused system failures.
- Strong programming skills and willingness to work across stacks and unfamiliar domains.
- Experience maintaining production services with agentic coding tools such as Claude Code, Codex, or similar.
- Experience with cloud infrastructure on Azure, GCP, or AWS and modern distributed system patterns.
- Ability to translate security requirements into scalable engineering solutions.
- Strong communication and collaboration skills with the ability to influence without formal authority.
- Preferred experience building security platforms or programs at hyper-growth startups.
- Preferred background in developer platform or infrastructure engineering.
- Preferred experience with SCIM, OIDC, SAML, policy engines such as OPA, Cedar, or Zanzibar-style systems, or hardware-backed credentials.
- Preferred experience in highly regulated enterprise environments.
Tech Stack
Categories
About Harvey
Harvey builds domain-specific generative AI for legal and other professional services, delivered as an enterprise platform and APIs to automate contract analysis, due diligence, compliance, and litigation workflows. Founded in 2022 and headquartered in San Francisco, it sells to law firms and corporate legal departments on enterprise agreements; investors include Sequoia Capital and OpenAI. Customers include multiple Am Law 100 firms and Fortune 500 companies’ legal teams.