Veza is the identity security platform for human, non-human, and AI agent access. Customers use it to see who and what has access to what, govern it, and remediate risk across cloud, SaaS, and on-prem systems. Agent security is the inflection point. Backed by Greylock and Sequoia.
About the role
For positions in this location, we offer a base pay of $199,100 - $348,400, plus equity (when applicable), variable/incentive compensation and benefits. Sales positions generally offer a competitive On Target Earnings (OTE) incentive compensation structure. Please note that the base pay shown is a guideline, and individual total compensation will vary based on factors such as qualifications, skill level, competencies, and work location. Found on 1752vc Careers, the job board for startup and VC roles.
What they're looking for
- 12+ years in security or identity engineering, with a substantial share spent designing identity systems in production at scale
- Strong background in identity and access: IGA, IAM, PAM, authorization models, access reviews, lifecycle management, or adjacent security domains
- Deep hands-on expertise in workload identity, specifically SPIFFE/SPIRE or an equivalent, and in ephemeral credential design. You can explain trust bootstrapping and rotation failure modes without notes
- Strong grounding in OAuth 2.x, OIDC, token exchange, and authorization models (RBAC, ABAC, ReBAC, and policy engines such as OPA or Cedar)
- Understanding of non-human identity (service accounts, secrets, API keys, workload identity) and emerging agent identity and authorization models
- Experience building security products that meet their own security and compliance bar (SOC 2, FedRAMP or equivalent, data residency)
More about this role
What you'll do
Identity
- Own the identity model for workloads and agents: SPIFFE/SPIRE trust domains, workload attestation, and how identities are issued, scoped, rotated, and revoked.
- Architect ephemeral authentication and authorization end to end: short-lived credential issuance, token exchange and delegation (for example RFC 8693-style flows), and revocation that takes effect in practice.
- Define runtime authorization for agents: what an agent can access, under whose delegated authority, with what guardrails, and with audit trails that hold up to review.
- Lead the identity architecture for the Agent Security roadmap, including Runtime Authorization, the Access Policy Engine, and AgentID with short-lived credentials, and its integration with the NHI program.
- Set the identity standards for non-human identities across Veza’s integrations, covering how connectors authenticate, get scoped, and rotate secrets.
Core architecture
- Define identity contracts that the graph, data model, and integrations architects build against, and review designs in those areas for identity correctness.
- Shape how identity fits into the Veza-ServiceNow integration model, including shared...
Browse similar: Startup jobs