← All roles

Senior Identity Security Engineer

Palantir· Information Security
Apply on company site
Hybrid (Washington, DC)$135k - $200kFull-timePosted 4mo ago

About the role

Senior Identity Security Engineer focused on owning and advancing Palantir's identity security posture across workforce, customer, workload, and agentic identities within a hybrid environment in Washington, D.C.

Responsibilities

  • - Own the day-to-day identity security posture across corporate, production, customer, and US Government identity planes
  • - Drive the rollout of agent identity infrastructure - short-lived credentials, lifecycle bound to a human principal, controlled workload onboarding
  • - Architect authentication, federation, and authorization systems - including SAML, OIDC, and policy-driven access control models (RBAC, ABAC, policy-as-code) - across workforce and workload identity
  • - Scale non-human identity patterns across service, workload, and agent populations - short-lived credentials, mTLS, identity-based networking
  • - Drive adoption of just-in-time access patterns across the identity program, partnering with platform and engineering teams on governance rollout and policy enforcement
  • - Lead identity threat modeling on a regular cadence; publish findings and track remediation
  • - Serve as a primary security reviewer on identity architecture decisions and cross-team RFCs
  • - Research and drive adoption of emerging identity security primitives and standards in partnership with Security Engineers across InfoSec
  • - Partner with engineering teams across Palantir to reduce the attack surface of identity integrations at scale

Qualifications

  • - 5+ years of experience in Information Security, Identity and Access Management, or an equivalent discipline, with demonstrated depth in identity-specific security
  • - Hands-on production experience with at least one enterprise identity provider (Entra ID, Okta, or equivalent), including its governance and security surface
  • - Deep technical proficiency in identity protocols (SAML, OIDC, OAuth 2.0, SCIM, FIDO2, WebAuthn) and their attack surface
  • - Working proficiency in Go, Python, PowerShell, or TypeScript - enough to prototype tooling, analyze identity-handling code for security defects, scale automation across the environment, and engage in code review
  • - Strong communication skills and ability to communicate to a wide-ranging audience - from engineer-facing design reviews to leadership-facing risk calls

Skills

Required:Identity and Access ManagementIdentity protocols (SAML, OIDC, OAuth 2.0, SCIM, FIDO2, WebAuthn)Go, Python, PowerShell, or TypeScriptThreat modeling

Benefits

  • Medical, dental, and vision insurance for employees and eligible dependents
  • Basic life, AD&D and disability insurance
  • Commuter benefits
  • Take what you need paid time off (not accrual based)
  • 2 weeks paid time off built into the end of each year (subject to team and business needs)
  • 10 paid holidays
  • Supportive leave of absence program including time off for military service and medical events
  • Paid leave for new parents and subsidized back-up care for all parents
  • Fertility and family building benefits including adoption, surrogacy, and preservation
  • Stipend to help with expenses that come with a new child
  • Employees can enroll in Palantir’s 401k plan
Last updated Oct 21, 2026. Interested? Apply on the company site.

About Palantir

liquid-ai-recruiting-target
Company profileWebsite

More open roles at Palantir