Senior Identity Security Engineer
Palantir· Information Security
Palo Alto, CA$135k - $200kFull-timePosted 4mo ago
About the role
Senior Identity Security Engineer responsible for the security posture of Palantir's identity infrastructure across workforce, customer, workload, and agentic identities; shaping identity security direction, threat modeling, and enabling just-in-time and policy-driven access across Palantir’s identity surface.
Responsibilities
- Own the day-to-day identity security posture across corporate, production, customer, and US Government identity planes
- Drive the rollout of agent identity infrastructure - short-lived credentials, lifecycle bound to a human principal, controlled workload onboarding
- Architect authentication, federation, and authorization systems - including SAML, OIDC, and policy-driven access control models (RBAC, ABAC, policy-as-code) - across workforce and workload identity
- Scale non-human identity patterns across service, workload, and agent populations - short-lived credentials, mTLS, identity-based networking
- Drive adoption of just-in-time access patterns across the identity program, partnering with platform and engineering teams on governance rollout and policy enforcement
- Lead identity threat modeling on a regular cadence; publish findings and track remediation
- Serve as a primary security reviewer on identity architecture decisions and cross-team RFCs
- Research and drive adoption of emerging identity security primitives and standards in partnership with Security Engineers across InfoSec
- Partner with engineering teams across Palantir to reduce the attack surface of identity integrations at scale
Qualifications
- 5+ years of experience in Information Security, Identity and Access Management, or an equivalent discipline, with demonstrated depth in identity-specific security
- Hands-on production experience with at least one enterprise identity provider (Entra ID, Okta, or equivalent), including its governance and security surface
- Deep technical proficiency in identity protocols (SAML, OIDC, OAuth 2.0, SCIM, FIDO2, WebAuthn) and their attack surface
- Working proficiency in Go, Python, PowerShell, or TypeScript - enough to prototype tooling, analyze identity-handling code for security defects, scale automation across the environment, and engage in code review
- Strong communication skills and ability to communicate to a wide-ranging audience - from engineer-facing design reviews to leadership-facing risk calls
Skills
Required:Identity security governanceIdentity protocols (SAML, OIDC, OAuth 2.0, SCIM, FIDO2, WebAuthn)Enterprise identity providersGo, Python, PowerShell, or TypeScript
Benefits
- Medical, dental, and vision insurance for employees and eligible dependents
- Basic life, AD&D and disability insurance
- Commuter benefits
- Paid time off with 2 weeks at year-end
- 10 paid holidays per year
- Leave of absence program including military and medical events
- Paid parental leave and subsidized back-up care
- Fertility and family-building benefits (adoption, surrogacy, preservation)
- Child-related expense stipend
- 401k plan enrollment
Last updated Oct 21, 2026. Interested? Apply on the company site.
More open roles at Palantir
- Physical Security Manager4d agoPalo Alto, CA · Global Security and Investigations
- Compliance Analyst4d agoHybrid (Washington, D.C.) · Information Security
- Compliance Analyst4d agoHybrid (New York, NY) · Information Security
- Software Engineer, Internship - Query Engines4d agoNew York, NY · Dev
- Software Engineer, Internship - Query Engines4d agoLondon · Dev