← All roles

Senior Identity Security Engineer

Palantir· Information Security
Apply on company site
Hybrid (New York, NY)$135k - $200k + equityFull-timePosted 4mo ago

About the role

Senior Identity Security Engineer responsible for the security posture of Palantir's identity infrastructure across workforce, customer, workload, and agentic identities; focus on authentication, authorization, identity threat modeling, and just-in-time access across the organization and services.

Responsibilities

  • Own the day-to-day identity security posture across corporate, production, customer, and US Government identity planes
  • Drive the rollout of agent identity infrastructure - short-lived credentials, lifecycle bound to a human principal, controlled workload onboarding
  • Architect authentication, federation, and authorization systems - including SAML, OIDC, and policy-driven access control models (RBAC, ABAC, policy-as-code) - across workforce and workload identity
  • Scale non-human identity patterns across service, workload, and agent populations - short-lived credentials, mTLS, identity-based networking
  • Drive adoption of just-in-time access patterns across the identity program, partnering with platform and engineering teams on governance rollout and policy enforcement
  • Lead identity threat modeling on a regular cadence; publish findings and track remediation
  • Serve as a primary security reviewer on identity architecture decisions and cross-team RFCs
  • Research and drive adoption of emerging identity security primitives and standards in partnership with Security Engineers across InfoSec
  • Partner with engineering teams across Palantir to reduce the attack surface of identity integrations at scale

Qualifications

  • 5+ years of experience in Information Security, Identity and Access Management, or an equivalent discipline, with demonstrated depth in identity-specific security
  • Hands-on production experience with at least one enterprise identity provider (Entra ID, Okta, or equivalent), including its governance and security surface
  • Deep technical proficiency in identity protocols (SAML, OIDC, OAuth 2.0, SCIM, FIDO2, WebAuthn) and their attack surface
  • Working proficiency in Go, Python, PowerShell, or TypeScript - enough to prototype tooling, analyze identity-handling code for security defects, scale automation across the environment, and engage in code review
  • Strong communication skills and ability to communicate to a wide-ranging audience - from engineer-facing design reviews to leadership-facing risk calls

Skills

Required:Identity securityIdentity provider administrationIdentity protocolsProgramming languages

Benefits

  • Employees (and their eligible dependents) can enroll in medical, dental, and vision insurance as well as voluntary life insurance
  • Employees are automatically covered by Palantir’s basic life, AD&D and disability insurance
  • Commuter benefits
  • Take what you need paid time off, not accrual based
  • 2 weeks paid time off built into the end of each year (subject to team and business needs)
  • 10 paid holidays throughout the calendar year
  • Supportive leave of absence program including time off for military service and medical events
  • Paid leave for new parents and subsidized back-up care for all parents
  • Fertility and family building benefits including but not limited to adoption, surrogacy, and preservation
  • Stipend to help with expenses that come with a new child
  • Employees can enroll in Palantir’s 401k plan
Last updated Oct 21, 2026. Interested? Apply on the company site.

About Palantir

liquid-ai-recruiting-target
Company profileWebsite

More open roles at Palantir