Platform Engineer - Identity Infrastructure

Stack

Responsibilities

• ▹Develop automation and tooling for corporate and customer-facing identity platforms
• ▹Build, secure and manage geo-redundant containerized services (EKS and ECS) in AWS and Azure
• ▹Scale the implementation of Single Sign-On (SSO) integrations across multiple Entra ID tenants using infrastructure-as-code frameworks
• ▹Build tooling to standardize and scale operational workflows across AWS, Azure and Google Cloud Platform (GCP)
• ▹Extend the identity platform to non-human identities, treating workloads and AI agents as first-class principals with scoped, short-lived credentials
• ▹Build the governance layer: an access graph that makes entitlements legible and a policy engine that makes authorization decisions enforceable and auditable
• ▹Design token-issuance and federation flows that make least-privilege, ephemeral access the default
• ▹Research and drive adoption of emerging authentication and session security standards (such as device-bound session credentials and continuous access evaluation) in collaboration with Security Engineers
• ▹Pressure-test designs and partner with Identity Security Engineers to threat model implementations before they ship
• ▹Partner with Security Compliance Engineers to build services that reduce the cost and complexity of compliance enforcement

Requirements

• ▹3+ years of experience in Site Reliability Engineering (SRE), DevOps, software engineering or an equivalent discipline, with a strong passion for security
• ▹Experience deploying and operating containerized services (EKS, ECS or similar) in AWS, Azure or Google Cloud
• ▹Experience building and operating production services or APIs, not only automation scripts
• ▹Expert-level proficiency in a language such as Go (preferred), Python or TypeScript
• ▹Experience with infrastructure-as-code (Terraform, Helm, CloudFormation or similar)
• ▹An active TS/SCI security clearance, or eligibility and willingness to obtain one

Nice to have

• ▹Technical proficiency in identity protocols (SAML, OIDC, OAuth 2.0, LDAP, Kerberos, FIDO2, WebAuthn)
• ▹Experience managing identities and governance workflows on platforms such as Entra ID, Keycloak, AWS Cognito or Okta
• ▹Experience with policy engines and authorization-as-code, and with relationship-based access modeling or entitlement graph design
• ▹Experience with token issuance and federation, including OAuth 2.0 token exchange, short-lived credentials and workload identity federation
• ▹Non-human identity experience: workload and machine identity (service-to-service authentication, mTLS, workload attestation), plus interest in agentic identity (agents as principals, delegation and on-behalf-of flows, attribution across a delegation chain)

Soft skills

What we offer

• ▹Estimated salary range $135,000-$200,000/year; total compensation may also include Restricted Stock Units, sign-on bonus and other incentives
• ▹Medical, dental and vision insurance and voluntary life insurance for employees and eligible dependents
• ▹Basic life, AD&D and disability insurance
• ▹Commuter benefits and relocation assistance
• ▹Take-what-you-need paid time off (not accrual based), 2 weeks of paid time off at the end of each year, 10 paid holidays
• ▹Leave of absence program including time off for military service and medical events
• ▹Paid leave for new parents and subsidized back-up care
• ▹Fertility and family building benefits (adoption, surrogacy, preservation) and a new-child stipend
• ▹401k plan

About the company

Palantir builds leading software for data-driven decisions and operations, helping partners develop lifesaving drugs, forecast supply chain disruptions and locate missing children. The Identity Platform team is part of Palantir's Information Security organization.